Loading...
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * RapidIO mport character device
4 *
5 * Copyright 2014-2015 Integrated Device Technology, Inc.
6 * Alexandre Bounine <alexandre.bounine@idt.com>
7 * Copyright 2014-2015 Prodrive Technologies
8 * Andre van Herk <andre.van.herk@prodrive-technologies.com>
9 * Jerry Jacobs <jerry.jacobs@prodrive-technologies.com>
10 * Copyright (C) 2014 Texas Instruments Incorporated
11 * Aurelien Jacquiot <a-jacquiot@ti.com>
12 */
13#include <linux/module.h>
14#include <linux/kernel.h>
15#include <linux/cdev.h>
16#include <linux/ioctl.h>
17#include <linux/uaccess.h>
18#include <linux/list.h>
19#include <linux/fs.h>
20#include <linux/err.h>
21#include <linux/net.h>
22#include <linux/poll.h>
23#include <linux/spinlock.h>
24#include <linux/sched.h>
25#include <linux/kfifo.h>
26
27#include <linux/mm.h>
28#include <linux/slab.h>
29#include <linux/vmalloc.h>
30#include <linux/mman.h>
31
32#include <linux/dma-mapping.h>
33#ifdef CONFIG_RAPIDIO_DMA_ENGINE
34#include <linux/dmaengine.h>
35#endif
36
37#include <linux/rio.h>
38#include <linux/rio_ids.h>
39#include <linux/rio_drv.h>
40#include <linux/rio_mport_cdev.h>
41
42#include "../rio.h"
43
44#define DRV_NAME "rio_mport"
45#define DRV_PREFIX DRV_NAME ": "
46#define DEV_NAME "rio_mport"
47#define DRV_VERSION "1.0.0"
48
49/* Debug output filtering masks */
50enum {
51 DBG_NONE = 0,
52 DBG_INIT = BIT(0), /* driver init */
53 DBG_EXIT = BIT(1), /* driver exit */
54 DBG_MPORT = BIT(2), /* mport add/remove */
55 DBG_RDEV = BIT(3), /* RapidIO device add/remove */
56 DBG_DMA = BIT(4), /* DMA transfer messages */
57 DBG_MMAP = BIT(5), /* mapping messages */
58 DBG_IBW = BIT(6), /* inbound window */
59 DBG_EVENT = BIT(7), /* event handling messages */
60 DBG_OBW = BIT(8), /* outbound window messages */
61 DBG_DBELL = BIT(9), /* doorbell messages */
62 DBG_ALL = ~0,
63};
64
65#ifdef DEBUG
66#define rmcd_debug(level, fmt, arg...) \
67 do { \
68 if (DBG_##level & dbg_level) \
69 pr_debug(DRV_PREFIX "%s: " fmt "\n", __func__, ##arg); \
70 } while (0)
71#else
72#define rmcd_debug(level, fmt, arg...) \
73 no_printk(KERN_DEBUG pr_fmt(DRV_PREFIX fmt "\n"), ##arg)
74#endif
75
76#define rmcd_warn(fmt, arg...) \
77 pr_warn(DRV_PREFIX "%s WARNING " fmt "\n", __func__, ##arg)
78
79#define rmcd_error(fmt, arg...) \
80 pr_err(DRV_PREFIX "%s ERROR " fmt "\n", __func__, ##arg)
81
82MODULE_AUTHOR("Jerry Jacobs <jerry.jacobs@prodrive-technologies.com>");
83MODULE_AUTHOR("Aurelien Jacquiot <a-jacquiot@ti.com>");
84MODULE_AUTHOR("Alexandre Bounine <alexandre.bounine@idt.com>");
85MODULE_AUTHOR("Andre van Herk <andre.van.herk@prodrive-technologies.com>");
86MODULE_DESCRIPTION("RapidIO mport character device driver");
87MODULE_LICENSE("GPL");
88MODULE_VERSION(DRV_VERSION);
89
90static int dma_timeout = 3000; /* DMA transfer timeout in msec */
91module_param(dma_timeout, int, S_IRUGO);
92MODULE_PARM_DESC(dma_timeout, "DMA Transfer Timeout in msec (default: 3000)");
93
94#ifdef DEBUG
95static u32 dbg_level = DBG_NONE;
96module_param(dbg_level, uint, S_IWUSR | S_IWGRP | S_IRUGO);
97MODULE_PARM_DESC(dbg_level, "Debugging output level (default 0 = none)");
98#endif
99
100/*
101 * An internal DMA coherent buffer
102 */
103struct mport_dma_buf {
104 void *ib_base;
105 dma_addr_t ib_phys;
106 u32 ib_size;
107 u64 ib_rio_base;
108 bool ib_map;
109 struct file *filp;
110};
111
112/*
113 * Internal memory mapping structure
114 */
115enum rio_mport_map_dir {
116 MAP_INBOUND,
117 MAP_OUTBOUND,
118 MAP_DMA,
119};
120
121struct rio_mport_mapping {
122 struct list_head node;
123 struct mport_dev *md;
124 enum rio_mport_map_dir dir;
125 u16 rioid;
126 u64 rio_addr;
127 dma_addr_t phys_addr; /* for mmap */
128 void *virt_addr; /* kernel address, for dma_free_coherent */
129 u64 size;
130 struct kref ref; /* refcount of vmas sharing the mapping */
131 struct file *filp;
132};
133
134struct rio_mport_dma_map {
135 int valid;
136 u64 length;
137 void *vaddr;
138 dma_addr_t paddr;
139};
140
141#define MPORT_MAX_DMA_BUFS 16
142#define MPORT_EVENT_DEPTH 10
143
144/*
145 * mport_dev driver-specific structure that represents mport device
146 * @active mport device status flag
147 * @node list node to maintain list of registered mports
148 * @cdev character device
149 * @dev associated device object
150 * @mport associated subsystem's master port device object
151 * @buf_mutex lock for buffer handling
152 * @file_mutex - lock for open files list
153 * @file_list - list of open files on given mport
154 * @properties properties of this mport
155 * @portwrites queue of inbound portwrites
156 * @pw_lock lock for port write queue
157 * @mappings queue for memory mappings
158 * @dma_chan DMA channels associated with this device
159 * @dma_ref:
160 * @comp:
161 */
162struct mport_dev {
163 atomic_t active;
164 struct list_head node;
165 struct cdev cdev;
166 struct device dev;
167 struct rio_mport *mport;
168 struct mutex buf_mutex;
169 struct mutex file_mutex;
170 struct list_head file_list;
171 struct rio_mport_properties properties;
172 struct list_head doorbells;
173 spinlock_t db_lock;
174 struct list_head portwrites;
175 spinlock_t pw_lock;
176 struct list_head mappings;
177#ifdef CONFIG_RAPIDIO_DMA_ENGINE
178 struct dma_chan *dma_chan;
179 struct kref dma_ref;
180 struct completion comp;
181#endif
182};
183
184/*
185 * mport_cdev_priv - data structure specific to individual file object
186 * associated with an open device
187 * @md master port character device object
188 * @async_queue - asynchronous notification queue
189 * @list - file objects tracking list
190 * @db_filters inbound doorbell filters for this descriptor
191 * @pw_filters portwrite filters for this descriptor
192 * @event_fifo event fifo for this descriptor
193 * @event_rx_wait wait queue for this descriptor
194 * @fifo_lock lock for event_fifo
195 * @event_mask event mask for this descriptor
196 * @dmach DMA engine channel allocated for specific file object
197 */
198struct mport_cdev_priv {
199 struct mport_dev *md;
200 struct fasync_struct *async_queue;
201 struct list_head list;
202 struct list_head db_filters;
203 struct list_head pw_filters;
204 struct kfifo event_fifo;
205 wait_queue_head_t event_rx_wait;
206 spinlock_t fifo_lock;
207 u32 event_mask; /* RIO_DOORBELL, RIO_PORTWRITE */
208#ifdef CONFIG_RAPIDIO_DMA_ENGINE
209 struct dma_chan *dmach;
210 struct list_head async_list;
211 spinlock_t req_lock;
212 struct mutex dma_lock;
213 struct kref dma_ref;
214 struct completion comp;
215#endif
216};
217
218/*
219 * rio_mport_pw_filter - structure to describe a portwrite filter
220 * md_node node in mport device's list
221 * priv_node node in private file object's list
222 * priv reference to private data
223 * filter actual portwrite filter
224 */
225struct rio_mport_pw_filter {
226 struct list_head md_node;
227 struct list_head priv_node;
228 struct mport_cdev_priv *priv;
229 struct rio_pw_filter filter;
230};
231
232/*
233 * rio_mport_db_filter - structure to describe a doorbell filter
234 * @data_node reference to device node
235 * @priv_node node in private data
236 * @priv reference to private data
237 * @filter actual doorbell filter
238 */
239struct rio_mport_db_filter {
240 struct list_head data_node;
241 struct list_head priv_node;
242 struct mport_cdev_priv *priv;
243 struct rio_doorbell_filter filter;
244};
245
246static LIST_HEAD(mport_devs);
247static DEFINE_MUTEX(mport_devs_lock);
248
249#if (0) /* used by commented out portion of poll function : FIXME */
250static DECLARE_WAIT_QUEUE_HEAD(mport_cdev_wait);
251#endif
252
253static const struct class dev_class = {
254 .name = DRV_NAME,
255};
256static dev_t dev_number;
257
258static void mport_release_mapping(struct kref *ref);
259
260static int rio_mport_maint_rd(struct mport_cdev_priv *priv, void __user *arg,
261 int local)
262{
263 struct rio_mport *mport = priv->md->mport;
264 struct rio_mport_maint_io maint_io;
265 u32 *buffer;
266 u32 offset;
267 size_t length;
268 int ret, i;
269
270 if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))
271 return -EFAULT;
272
273 if ((maint_io.offset % 4) ||
274 (maint_io.length == 0) || (maint_io.length % 4) ||
275 (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)
276 return -EINVAL;
277
278 buffer = vmalloc(maint_io.length);
279 if (buffer == NULL)
280 return -ENOMEM;
281 length = maint_io.length/sizeof(u32);
282 offset = maint_io.offset;
283
284 for (i = 0; i < length; i++) {
285 if (local)
286 ret = __rio_local_read_config_32(mport,
287 offset, &buffer[i]);
288 else
289 ret = rio_mport_read_config_32(mport, maint_io.rioid,
290 maint_io.hopcount, offset, &buffer[i]);
291 if (ret)
292 goto out;
293
294 offset += 4;
295 }
296
297 if (unlikely(copy_to_user((void __user *)(uintptr_t)maint_io.buffer,
298 buffer, maint_io.length)))
299 ret = -EFAULT;
300out:
301 vfree(buffer);
302 return ret;
303}
304
305static int rio_mport_maint_wr(struct mport_cdev_priv *priv, void __user *arg,
306 int local)
307{
308 struct rio_mport *mport = priv->md->mport;
309 struct rio_mport_maint_io maint_io;
310 u32 *buffer;
311 u32 offset;
312 size_t length;
313 int ret = -EINVAL, i;
314
315 if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))
316 return -EFAULT;
317
318 if ((maint_io.offset % 4) ||
319 (maint_io.length == 0) || (maint_io.length % 4) ||
320 (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)
321 return -EINVAL;
322
323 buffer = vmalloc(maint_io.length);
324 if (buffer == NULL)
325 return -ENOMEM;
326 length = maint_io.length;
327
328 if (unlikely(copy_from_user(buffer,
329 (void __user *)(uintptr_t)maint_io.buffer, length))) {
330 ret = -EFAULT;
331 goto out;
332 }
333
334 offset = maint_io.offset;
335 length /= sizeof(u32);
336
337 for (i = 0; i < length; i++) {
338 if (local)
339 ret = __rio_local_write_config_32(mport,
340 offset, buffer[i]);
341 else
342 ret = rio_mport_write_config_32(mport, maint_io.rioid,
343 maint_io.hopcount,
344 offset, buffer[i]);
345 if (ret)
346 goto out;
347
348 offset += 4;
349 }
350
351out:
352 vfree(buffer);
353 return ret;
354}
355
356
357/*
358 * Inbound/outbound memory mapping functions
359 */
360static int
361rio_mport_create_outbound_mapping(struct mport_dev *md, struct file *filp,
362 u16 rioid, u64 raddr, u32 size,
363 dma_addr_t *paddr)
364{
365 struct rio_mport *mport = md->mport;
366 struct rio_mport_mapping *map;
367 int ret;
368
369 rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%x", rioid, raddr, size);
370
371 map = kzalloc(sizeof(*map), GFP_KERNEL);
372 if (map == NULL)
373 return -ENOMEM;
374
375 ret = rio_map_outb_region(mport, rioid, raddr, size, 0, paddr);
376 if (ret < 0)
377 goto err_map_outb;
378
379 map->dir = MAP_OUTBOUND;
380 map->rioid = rioid;
381 map->rio_addr = raddr;
382 map->size = size;
383 map->phys_addr = *paddr;
384 map->filp = filp;
385 map->md = md;
386 kref_init(&map->ref);
387 list_add_tail(&map->node, &md->mappings);
388 return 0;
389err_map_outb:
390 kfree(map);
391 return ret;
392}
393
394static int
395rio_mport_get_outbound_mapping(struct mport_dev *md, struct file *filp,
396 u16 rioid, u64 raddr, u32 size,
397 dma_addr_t *paddr)
398{
399 struct rio_mport_mapping *map;
400 int err = -ENOMEM;
401
402 mutex_lock(&md->buf_mutex);
403 list_for_each_entry(map, &md->mappings, node) {
404 if (map->dir != MAP_OUTBOUND)
405 continue;
406 if (rioid == map->rioid &&
407 raddr == map->rio_addr && size == map->size) {
408 *paddr = map->phys_addr;
409 err = 0;
410 break;
411 } else if (rioid == map->rioid &&
412 raddr < (map->rio_addr + map->size - 1) &&
413 (raddr + size) > map->rio_addr) {
414 err = -EBUSY;
415 break;
416 }
417 }
418
419 /* If not found, create new */
420 if (err == -ENOMEM)
421 err = rio_mport_create_outbound_mapping(md, filp, rioid, raddr,
422 size, paddr);
423 mutex_unlock(&md->buf_mutex);
424 return err;
425}
426
427static int rio_mport_obw_map(struct file *filp, void __user *arg)
428{
429 struct mport_cdev_priv *priv = filp->private_data;
430 struct mport_dev *data = priv->md;
431 struct rio_mmap map;
432 dma_addr_t paddr;
433 int ret;
434
435 if (unlikely(copy_from_user(&map, arg, sizeof(map))))
436 return -EFAULT;
437
438 rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%llx",
439 map.rioid, map.rio_addr, map.length);
440
441 ret = rio_mport_get_outbound_mapping(data, filp, map.rioid,
442 map.rio_addr, map.length, &paddr);
443 if (ret < 0) {
444 rmcd_error("Failed to set OBW err= %d", ret);
445 return ret;
446 }
447
448 map.handle = paddr;
449
450 if (unlikely(copy_to_user(arg, &map, sizeof(map))))
451 return -EFAULT;
452 return 0;
453}
454
455/*
456 * rio_mport_obw_free() - unmap an OutBound Window from RapidIO address space
457 *
458 * @priv: driver private data
459 * @arg: buffer handle returned by allocation routine
460 */
461static int rio_mport_obw_free(struct file *filp, void __user *arg)
462{
463 struct mport_cdev_priv *priv = filp->private_data;
464 struct mport_dev *md = priv->md;
465 u64 handle;
466 struct rio_mport_mapping *map, *_map;
467
468 if (!md->mport->ops->unmap_outb)
469 return -EPROTONOSUPPORT;
470
471 if (copy_from_user(&handle, arg, sizeof(handle)))
472 return -EFAULT;
473
474 rmcd_debug(OBW, "h=0x%llx", handle);
475
476 mutex_lock(&md->buf_mutex);
477 list_for_each_entry_safe(map, _map, &md->mappings, node) {
478 if (map->dir == MAP_OUTBOUND && map->phys_addr == handle) {
479 if (map->filp == filp) {
480 rmcd_debug(OBW, "kref_put h=0x%llx", handle);
481 map->filp = NULL;
482 kref_put(&map->ref, mport_release_mapping);
483 }
484 break;
485 }
486 }
487 mutex_unlock(&md->buf_mutex);
488
489 return 0;
490}
491
492/*
493 * maint_hdid_set() - Set the host Device ID
494 * @priv: driver private data
495 * @arg: Device Id
496 */
497static int maint_hdid_set(struct mport_cdev_priv *priv, void __user *arg)
498{
499 struct mport_dev *md = priv->md;
500 u16 hdid;
501
502 if (copy_from_user(&hdid, arg, sizeof(hdid)))
503 return -EFAULT;
504
505 md->mport->host_deviceid = hdid;
506 md->properties.hdid = hdid;
507 rio_local_set_device_id(md->mport, hdid);
508
509 rmcd_debug(MPORT, "Set host device Id to %d", hdid);
510
511 return 0;
512}
513
514/*
515 * maint_comptag_set() - Set the host Component Tag
516 * @priv: driver private data
517 * @arg: Component Tag
518 */
519static int maint_comptag_set(struct mport_cdev_priv *priv, void __user *arg)
520{
521 struct mport_dev *md = priv->md;
522 u32 comptag;
523
524 if (copy_from_user(&comptag, arg, sizeof(comptag)))
525 return -EFAULT;
526
527 rio_local_write_config_32(md->mport, RIO_COMPONENT_TAG_CSR, comptag);
528
529 rmcd_debug(MPORT, "Set host Component Tag to %d", comptag);
530
531 return 0;
532}
533
534#ifdef CONFIG_RAPIDIO_DMA_ENGINE
535
536struct mport_dma_req {
537 struct kref refcount;
538 struct list_head node;
539 struct file *filp;
540 struct mport_cdev_priv *priv;
541 enum rio_transfer_sync sync;
542 struct sg_table sgt;
543 struct page **page_list;
544 unsigned int nr_pages;
545 struct rio_mport_mapping *map;
546 struct dma_chan *dmach;
547 enum dma_data_direction dir;
548 dma_cookie_t cookie;
549 enum dma_status status;
550 struct completion req_comp;
551};
552
553static void mport_release_def_dma(struct kref *dma_ref)
554{
555 struct mport_dev *md =
556 container_of(dma_ref, struct mport_dev, dma_ref);
557
558 rmcd_debug(EXIT, "DMA_%d", md->dma_chan->chan_id);
559 rio_release_dma(md->dma_chan);
560 md->dma_chan = NULL;
561}
562
563static void mport_release_dma(struct kref *dma_ref)
564{
565 struct mport_cdev_priv *priv =
566 container_of(dma_ref, struct mport_cdev_priv, dma_ref);
567
568 rmcd_debug(EXIT, "DMA_%d", priv->dmach->chan_id);
569 complete(&priv->comp);
570}
571
572static void dma_req_free(struct kref *ref)
573{
574 struct mport_dma_req *req = container_of(ref, struct mport_dma_req,
575 refcount);
576 struct mport_cdev_priv *priv = req->priv;
577
578 dma_unmap_sg(req->dmach->device->dev,
579 req->sgt.sgl, req->sgt.nents, req->dir);
580 sg_free_table(&req->sgt);
581 if (req->page_list) {
582 unpin_user_pages(req->page_list, req->nr_pages);
583 kfree(req->page_list);
584 }
585
586 if (req->map) {
587 mutex_lock(&req->map->md->buf_mutex);
588 kref_put(&req->map->ref, mport_release_mapping);
589 mutex_unlock(&req->map->md->buf_mutex);
590 }
591
592 kref_put(&priv->dma_ref, mport_release_dma);
593
594 kfree(req);
595}
596
597static void dma_xfer_callback(void *param)
598{
599 struct mport_dma_req *req = (struct mport_dma_req *)param;
600 struct mport_cdev_priv *priv = req->priv;
601
602 req->status = dma_async_is_tx_complete(priv->dmach, req->cookie,
603 NULL, NULL);
604 complete(&req->req_comp);
605 kref_put(&req->refcount, dma_req_free);
606}
607
608/*
609 * prep_dma_xfer() - Configure and send request to DMAengine to prepare DMA
610 * transfer object.
611 * Returns pointer to DMA transaction descriptor allocated by DMA driver on
612 * success or ERR_PTR (and/or NULL) if failed. Caller must check returned
613 * non-NULL pointer using IS_ERR macro.
614 */
615static struct dma_async_tx_descriptor
616*prep_dma_xfer(struct dma_chan *chan, struct rio_transfer_io *transfer,
617 struct sg_table *sgt, int nents, enum dma_transfer_direction dir,
618 enum dma_ctrl_flags flags)
619{
620 struct rio_dma_data tx_data;
621
622 tx_data.sg = sgt->sgl;
623 tx_data.sg_len = nents;
624 tx_data.rio_addr_u = 0;
625 tx_data.rio_addr = transfer->rio_addr;
626 if (dir == DMA_MEM_TO_DEV) {
627 switch (transfer->method) {
628 case RIO_EXCHANGE_NWRITE:
629 tx_data.wr_type = RDW_ALL_NWRITE;
630 break;
631 case RIO_EXCHANGE_NWRITE_R_ALL:
632 tx_data.wr_type = RDW_ALL_NWRITE_R;
633 break;
634 case RIO_EXCHANGE_NWRITE_R:
635 tx_data.wr_type = RDW_LAST_NWRITE_R;
636 break;
637 case RIO_EXCHANGE_DEFAULT:
638 tx_data.wr_type = RDW_DEFAULT;
639 break;
640 default:
641 return ERR_PTR(-EINVAL);
642 }
643 }
644
645 return rio_dma_prep_xfer(chan, transfer->rioid, &tx_data, dir, flags);
646}
647
648/* Request DMA channel associated with this mport device.
649 * Try to request DMA channel for every new process that opened given
650 * mport. If a new DMA channel is not available use default channel
651 * which is the first DMA channel opened on mport device.
652 */
653static int get_dma_channel(struct mport_cdev_priv *priv)
654{
655 mutex_lock(&priv->dma_lock);
656 if (!priv->dmach) {
657 priv->dmach = rio_request_mport_dma(priv->md->mport);
658 if (!priv->dmach) {
659 /* Use default DMA channel if available */
660 if (priv->md->dma_chan) {
661 priv->dmach = priv->md->dma_chan;
662 kref_get(&priv->md->dma_ref);
663 } else {
664 rmcd_error("Failed to get DMA channel");
665 mutex_unlock(&priv->dma_lock);
666 return -ENODEV;
667 }
668 } else if (!priv->md->dma_chan) {
669 /* Register default DMA channel if we do not have one */
670 priv->md->dma_chan = priv->dmach;
671 kref_init(&priv->md->dma_ref);
672 rmcd_debug(DMA, "Register DMA_chan %d as default",
673 priv->dmach->chan_id);
674 }
675
676 kref_init(&priv->dma_ref);
677 init_completion(&priv->comp);
678 }
679
680 kref_get(&priv->dma_ref);
681 mutex_unlock(&priv->dma_lock);
682 return 0;
683}
684
685static void put_dma_channel(struct mport_cdev_priv *priv)
686{
687 kref_put(&priv->dma_ref, mport_release_dma);
688}
689
690/*
691 * DMA transfer functions
692 */
693static int do_dma_request(struct mport_dma_req *req,
694 struct rio_transfer_io *xfer,
695 enum rio_transfer_sync sync, int nents)
696{
697 struct mport_cdev_priv *priv;
698 struct sg_table *sgt;
699 struct dma_chan *chan;
700 struct dma_async_tx_descriptor *tx;
701 dma_cookie_t cookie;
702 unsigned long tmo = msecs_to_jiffies(dma_timeout);
703 enum dma_transfer_direction dir;
704 long wret;
705 int ret = 0;
706
707 priv = req->priv;
708 sgt = &req->sgt;
709
710 chan = priv->dmach;
711 dir = (req->dir == DMA_FROM_DEVICE) ? DMA_DEV_TO_MEM : DMA_MEM_TO_DEV;
712
713 rmcd_debug(DMA, "%s(%d) uses %s for DMA_%s",
714 current->comm, task_pid_nr(current),
715 dev_name(&chan->dev->device),
716 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE");
717
718 /* Initialize DMA transaction request */
719 tx = prep_dma_xfer(chan, xfer, sgt, nents, dir,
720 DMA_CTRL_ACK | DMA_PREP_INTERRUPT);
721
722 if (!tx) {
723 rmcd_debug(DMA, "prep error for %s A:0x%llx L:0x%llx",
724 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
725 xfer->rio_addr, xfer->length);
726 ret = -EIO;
727 goto err_out;
728 } else if (IS_ERR(tx)) {
729 ret = PTR_ERR(tx);
730 rmcd_debug(DMA, "prep error %d for %s A:0x%llx L:0x%llx", ret,
731 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
732 xfer->rio_addr, xfer->length);
733 goto err_out;
734 }
735
736 tx->callback = dma_xfer_callback;
737 tx->callback_param = req;
738
739 req->status = DMA_IN_PROGRESS;
740 kref_get(&req->refcount);
741
742 cookie = dmaengine_submit(tx);
743 req->cookie = cookie;
744
745 rmcd_debug(DMA, "pid=%d DMA_%s tx_cookie = %d", task_pid_nr(current),
746 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
747
748 if (dma_submit_error(cookie)) {
749 rmcd_error("submit err=%d (addr:0x%llx len:0x%llx)",
750 cookie, xfer->rio_addr, xfer->length);
751 kref_put(&req->refcount, dma_req_free);
752 ret = -EIO;
753 goto err_out;
754 }
755
756 dma_async_issue_pending(chan);
757
758 if (sync == RIO_TRANSFER_ASYNC) {
759 spin_lock(&priv->req_lock);
760 list_add_tail(&req->node, &priv->async_list);
761 spin_unlock(&priv->req_lock);
762 return cookie;
763 } else if (sync == RIO_TRANSFER_FAF)
764 return 0;
765
766 wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo);
767
768 if (wret == 0) {
769 /* Timeout on wait occurred */
770 rmcd_error("%s(%d) timed out waiting for DMA_%s %d",
771 current->comm, task_pid_nr(current),
772 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
773 return -ETIMEDOUT;
774 } else if (wret == -ERESTARTSYS) {
775 /* Wait_for_completion was interrupted by a signal but DMA may
776 * be in progress
777 */
778 rmcd_error("%s(%d) wait for DMA_%s %d was interrupted",
779 current->comm, task_pid_nr(current),
780 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
781 return -EINTR;
782 }
783
784 if (req->status != DMA_COMPLETE) {
785 /* DMA transaction completion was signaled with error */
786 rmcd_error("%s(%d) DMA_%s %d completed with status %d (ret=%d)",
787 current->comm, task_pid_nr(current),
788 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
789 cookie, req->status, ret);
790 ret = -EIO;
791 }
792
793err_out:
794 return ret;
795}
796
797/*
798 * rio_dma_transfer() - Perform RapidIO DMA data transfer to/from
799 * the remote RapidIO device
800 * @filp: file pointer associated with the call
801 * @transfer_mode: DMA transfer mode
802 * @sync: synchronization mode
803 * @dir: DMA transfer direction (DMA_MEM_TO_DEV = write OR
804 * DMA_DEV_TO_MEM = read)
805 * @xfer: data transfer descriptor structure
806 */
807static int
808rio_dma_transfer(struct file *filp, u32 transfer_mode,
809 enum rio_transfer_sync sync, enum dma_data_direction dir,
810 struct rio_transfer_io *xfer)
811{
812 struct mport_cdev_priv *priv = filp->private_data;
813 unsigned long nr_pages = 0;
814 struct page **page_list = NULL;
815 struct mport_dma_req *req;
816 struct mport_dev *md = priv->md;
817 struct dma_chan *chan;
818 int ret;
819 int nents;
820
821 if (xfer->length == 0)
822 return -EINVAL;
823 req = kzalloc(sizeof(*req), GFP_KERNEL);
824 if (!req)
825 return -ENOMEM;
826
827 ret = get_dma_channel(priv);
828 if (ret) {
829 kfree(req);
830 return ret;
831 }
832 chan = priv->dmach;
833
834 kref_init(&req->refcount);
835 init_completion(&req->req_comp);
836 req->dir = dir;
837 req->filp = filp;
838 req->priv = priv;
839 req->dmach = chan;
840 req->sync = sync;
841
842 /*
843 * If parameter loc_addr != NULL, we are transferring data from/to
844 * data buffer allocated in user-space: lock in memory user-space
845 * buffer pages and build an SG table for DMA transfer request
846 *
847 * Otherwise (loc_addr == NULL) contiguous kernel-space buffer is
848 * used for DMA data transfers: build single entry SG table using
849 * offset within the internal buffer specified by handle parameter.
850 */
851 if (xfer->loc_addr) {
852 unsigned int offset;
853 long pinned;
854
855 offset = lower_32_bits(offset_in_page(xfer->loc_addr));
856 nr_pages = PAGE_ALIGN(xfer->length + offset) >> PAGE_SHIFT;
857
858 page_list = kmalloc_array(nr_pages,
859 sizeof(*page_list), GFP_KERNEL);
860 if (page_list == NULL) {
861 ret = -ENOMEM;
862 goto err_req;
863 }
864
865 pinned = pin_user_pages_fast(
866 (unsigned long)xfer->loc_addr & PAGE_MASK,
867 nr_pages,
868 dir == DMA_FROM_DEVICE ? FOLL_WRITE : 0,
869 page_list);
870
871 if (pinned != nr_pages) {
872 if (pinned < 0) {
873 rmcd_error("pin_user_pages_fast err=%ld",
874 pinned);
875 nr_pages = 0;
876 } else {
877 rmcd_error("pinned %ld out of %ld pages",
878 pinned, nr_pages);
879 /*
880 * Set nr_pages up to mean "how many pages to unpin, in
881 * the error handler:
882 */
883 nr_pages = pinned;
884 }
885 ret = -EFAULT;
886 goto err_pg;
887 }
888
889 ret = sg_alloc_table_from_pages(&req->sgt, page_list, nr_pages,
890 offset, xfer->length, GFP_KERNEL);
891 if (ret) {
892 rmcd_error("sg_alloc_table failed with err=%d", ret);
893 goto err_pg;
894 }
895
896 req->page_list = page_list;
897 req->nr_pages = nr_pages;
898 } else {
899 dma_addr_t baddr;
900 struct rio_mport_mapping *map;
901
902 baddr = (dma_addr_t)xfer->handle;
903
904 mutex_lock(&md->buf_mutex);
905 list_for_each_entry(map, &md->mappings, node) {
906 if (baddr >= map->phys_addr &&
907 baddr < (map->phys_addr + map->size)) {
908 kref_get(&map->ref);
909 req->map = map;
910 break;
911 }
912 }
913 mutex_unlock(&md->buf_mutex);
914
915 if (req->map == NULL) {
916 ret = -ENOMEM;
917 goto err_req;
918 }
919
920 if (xfer->length + xfer->offset > req->map->size) {
921 ret = -EINVAL;
922 goto err_req;
923 }
924
925 ret = sg_alloc_table(&req->sgt, 1, GFP_KERNEL);
926 if (unlikely(ret)) {
927 rmcd_error("sg_alloc_table failed for internal buf");
928 goto err_req;
929 }
930
931 sg_set_buf(req->sgt.sgl,
932 req->map->virt_addr + (baddr - req->map->phys_addr) +
933 xfer->offset, xfer->length);
934 }
935
936 nents = dma_map_sg(chan->device->dev,
937 req->sgt.sgl, req->sgt.nents, dir);
938 if (nents == 0) {
939 rmcd_error("Failed to map SG list");
940 ret = -EFAULT;
941 goto err_pg;
942 }
943
944 ret = do_dma_request(req, xfer, sync, nents);
945
946 if (ret >= 0) {
947 if (sync == RIO_TRANSFER_ASYNC)
948 return ret; /* return ASYNC cookie */
949 } else {
950 rmcd_debug(DMA, "do_dma_request failed with err=%d", ret);
951 }
952
953err_pg:
954 if (!req->page_list) {
955 unpin_user_pages(page_list, nr_pages);
956 kfree(page_list);
957 }
958err_req:
959 kref_put(&req->refcount, dma_req_free);
960 return ret;
961}
962
963static int rio_mport_transfer_ioctl(struct file *filp, void __user *arg)
964{
965 struct mport_cdev_priv *priv = filp->private_data;
966 struct rio_transaction transaction;
967 struct rio_transfer_io *transfer;
968 enum dma_data_direction dir;
969 int i, ret = 0;
970 size_t size;
971
972 if (unlikely(copy_from_user(&transaction, arg, sizeof(transaction))))
973 return -EFAULT;
974
975 if (transaction.count != 1) /* only single transfer for now */
976 return -EINVAL;
977
978 if ((transaction.transfer_mode &
979 priv->md->properties.transfer_mode) == 0)
980 return -ENODEV;
981
982 size = array_size(sizeof(*transfer), transaction.count);
983 transfer = vmalloc(size);
984 if (!transfer)
985 return -ENOMEM;
986
987 if (unlikely(copy_from_user(transfer,
988 (void __user *)(uintptr_t)transaction.block,
989 size))) {
990 ret = -EFAULT;
991 goto out_free;
992 }
993
994 dir = (transaction.dir == RIO_TRANSFER_DIR_READ) ?
995 DMA_FROM_DEVICE : DMA_TO_DEVICE;
996 for (i = 0; i < transaction.count && ret == 0; i++)
997 ret = rio_dma_transfer(filp, transaction.transfer_mode,
998 transaction.sync, dir, &transfer[i]);
999
1000 if (unlikely(copy_to_user((void __user *)(uintptr_t)transaction.block,
1001 transfer, size)))
1002 ret = -EFAULT;
1003
1004out_free:
1005 vfree(transfer);
1006
1007 return ret;
1008}
1009
1010static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)
1011{
1012 struct mport_cdev_priv *priv;
1013 struct rio_async_tx_wait w_param;
1014 struct mport_dma_req *req;
1015 dma_cookie_t cookie;
1016 unsigned long tmo;
1017 long wret;
1018 int found = 0;
1019 int ret;
1020
1021 priv = (struct mport_cdev_priv *)filp->private_data;
1022
1023 if (unlikely(copy_from_user(&w_param, arg, sizeof(w_param))))
1024 return -EFAULT;
1025
1026 cookie = w_param.token;
1027 if (w_param.timeout)
1028 tmo = msecs_to_jiffies(w_param.timeout);
1029 else /* Use default DMA timeout */
1030 tmo = msecs_to_jiffies(dma_timeout);
1031
1032 spin_lock(&priv->req_lock);
1033 list_for_each_entry(req, &priv->async_list, node) {
1034 if (req->cookie == cookie) {
1035 list_del(&req->node);
1036 found = 1;
1037 break;
1038 }
1039 }
1040 spin_unlock(&priv->req_lock);
1041
1042 if (!found)
1043 return -EAGAIN;
1044
1045 wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo);
1046
1047 if (wret == 0) {
1048 /* Timeout on wait occurred */
1049 rmcd_error("%s(%d) timed out waiting for ASYNC DMA_%s",
1050 current->comm, task_pid_nr(current),
1051 (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE");
1052 ret = -ETIMEDOUT;
1053 goto err_tmo;
1054 } else if (wret == -ERESTARTSYS) {
1055 /* Wait_for_completion was interrupted by a signal but DMA may
1056 * be still in progress
1057 */
1058 rmcd_error("%s(%d) wait for ASYNC DMA_%s was interrupted",
1059 current->comm, task_pid_nr(current),
1060 (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE");
1061 ret = -EINTR;
1062 goto err_tmo;
1063 }
1064
1065 if (req->status != DMA_COMPLETE) {
1066 /* DMA transaction completion signaled with transfer error */
1067 rmcd_error("%s(%d) ASYNC DMA_%s completion with status %d",
1068 current->comm, task_pid_nr(current),
1069 (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE",
1070 req->status);
1071 ret = -EIO;
1072 } else
1073 ret = 0;
1074
1075 if (req->status != DMA_IN_PROGRESS && req->status != DMA_PAUSED)
1076 kref_put(&req->refcount, dma_req_free);
1077
1078 return ret;
1079
1080err_tmo:
1081 /* Return request back into async queue */
1082 spin_lock(&priv->req_lock);
1083 list_add_tail(&req->node, &priv->async_list);
1084 spin_unlock(&priv->req_lock);
1085 return ret;
1086}
1087
1088static int rio_mport_create_dma_mapping(struct mport_dev *md, struct file *filp,
1089 u64 size, struct rio_mport_mapping **mapping)
1090{
1091 struct rio_mport_mapping *map;
1092
1093 map = kzalloc(sizeof(*map), GFP_KERNEL);
1094 if (map == NULL)
1095 return -ENOMEM;
1096
1097 map->virt_addr = dma_alloc_coherent(md->mport->dev.parent, size,
1098 &map->phys_addr, GFP_KERNEL);
1099 if (map->virt_addr == NULL) {
1100 kfree(map);
1101 return -ENOMEM;
1102 }
1103
1104 map->dir = MAP_DMA;
1105 map->size = size;
1106 map->filp = filp;
1107 map->md = md;
1108 kref_init(&map->ref);
1109 mutex_lock(&md->buf_mutex);
1110 list_add_tail(&map->node, &md->mappings);
1111 mutex_unlock(&md->buf_mutex);
1112 *mapping = map;
1113
1114 return 0;
1115}
1116
1117static int rio_mport_alloc_dma(struct file *filp, void __user *arg)
1118{
1119 struct mport_cdev_priv *priv = filp->private_data;
1120 struct mport_dev *md = priv->md;
1121 struct rio_dma_mem map;
1122 struct rio_mport_mapping *mapping = NULL;
1123 int ret;
1124
1125 if (unlikely(copy_from_user(&map, arg, sizeof(map))))
1126 return -EFAULT;
1127
1128 ret = rio_mport_create_dma_mapping(md, filp, map.length, &mapping);
1129 if (ret)
1130 return ret;
1131
1132 map.dma_handle = mapping->phys_addr;
1133
1134 if (unlikely(copy_to_user(arg, &map, sizeof(map)))) {
1135 mutex_lock(&md->buf_mutex);
1136 kref_put(&mapping->ref, mport_release_mapping);
1137 mutex_unlock(&md->buf_mutex);
1138 return -EFAULT;
1139 }
1140
1141 return 0;
1142}
1143
1144static int rio_mport_free_dma(struct file *filp, void __user *arg)
1145{
1146 struct mport_cdev_priv *priv = filp->private_data;
1147 struct mport_dev *md = priv->md;
1148 u64 handle;
1149 int ret = -EFAULT;
1150 struct rio_mport_mapping *map, *_map;
1151
1152 if (copy_from_user(&handle, arg, sizeof(handle)))
1153 return -EFAULT;
1154 rmcd_debug(EXIT, "filp=%p", filp);
1155
1156 mutex_lock(&md->buf_mutex);
1157 list_for_each_entry_safe(map, _map, &md->mappings, node) {
1158 if (map->dir == MAP_DMA && map->phys_addr == handle &&
1159 map->filp == filp) {
1160 kref_put(&map->ref, mport_release_mapping);
1161 ret = 0;
1162 break;
1163 }
1164 }
1165 mutex_unlock(&md->buf_mutex);
1166
1167 if (ret == -EFAULT) {
1168 rmcd_debug(DMA, "ERR no matching mapping");
1169 return ret;
1170 }
1171
1172 return 0;
1173}
1174#else
1175static int rio_mport_transfer_ioctl(struct file *filp, void *arg)
1176{
1177 return -ENODEV;
1178}
1179
1180static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)
1181{
1182 return -ENODEV;
1183}
1184
1185static int rio_mport_alloc_dma(struct file *filp, void __user *arg)
1186{
1187 return -ENODEV;
1188}
1189
1190static int rio_mport_free_dma(struct file *filp, void __user *arg)
1191{
1192 return -ENODEV;
1193}
1194#endif /* CONFIG_RAPIDIO_DMA_ENGINE */
1195
1196/*
1197 * Inbound/outbound memory mapping functions
1198 */
1199
1200static int
1201rio_mport_create_inbound_mapping(struct mport_dev *md, struct file *filp,
1202 u64 raddr, u64 size,
1203 struct rio_mport_mapping **mapping)
1204{
1205 struct rio_mport *mport = md->mport;
1206 struct rio_mport_mapping *map;
1207 int ret;
1208
1209 /* rio_map_inb_region() accepts u32 size */
1210 if (size > 0xffffffff)
1211 return -EINVAL;
1212
1213 map = kzalloc(sizeof(*map), GFP_KERNEL);
1214 if (map == NULL)
1215 return -ENOMEM;
1216
1217 map->virt_addr = dma_alloc_coherent(mport->dev.parent, size,
1218 &map->phys_addr, GFP_KERNEL);
1219 if (map->virt_addr == NULL) {
1220 ret = -ENOMEM;
1221 goto err_dma_alloc;
1222 }
1223
1224 if (raddr == RIO_MAP_ANY_ADDR)
1225 raddr = map->phys_addr;
1226 ret = rio_map_inb_region(mport, map->phys_addr, raddr, (u32)size, 0);
1227 if (ret < 0)
1228 goto err_map_inb;
1229
1230 map->dir = MAP_INBOUND;
1231 map->rio_addr = raddr;
1232 map->size = size;
1233 map->filp = filp;
1234 map->md = md;
1235 kref_init(&map->ref);
1236 mutex_lock(&md->buf_mutex);
1237 list_add_tail(&map->node, &md->mappings);
1238 mutex_unlock(&md->buf_mutex);
1239 *mapping = map;
1240 return 0;
1241
1242err_map_inb:
1243 dma_free_coherent(mport->dev.parent, size,
1244 map->virt_addr, map->phys_addr);
1245err_dma_alloc:
1246 kfree(map);
1247 return ret;
1248}
1249
1250static int
1251rio_mport_get_inbound_mapping(struct mport_dev *md, struct file *filp,
1252 u64 raddr, u64 size,
1253 struct rio_mport_mapping **mapping)
1254{
1255 struct rio_mport_mapping *map;
1256 int err = -ENOMEM;
1257
1258 if (raddr == RIO_MAP_ANY_ADDR)
1259 goto get_new;
1260
1261 mutex_lock(&md->buf_mutex);
1262 list_for_each_entry(map, &md->mappings, node) {
1263 if (map->dir != MAP_INBOUND)
1264 continue;
1265 if (raddr == map->rio_addr && size == map->size) {
1266 /* allow exact match only */
1267 *mapping = map;
1268 err = 0;
1269 break;
1270 } else if (raddr < (map->rio_addr + map->size - 1) &&
1271 (raddr + size) > map->rio_addr) {
1272 err = -EBUSY;
1273 break;
1274 }
1275 }
1276 mutex_unlock(&md->buf_mutex);
1277
1278 if (err != -ENOMEM)
1279 return err;
1280get_new:
1281 /* not found, create new */
1282 return rio_mport_create_inbound_mapping(md, filp, raddr, size, mapping);
1283}
1284
1285static int rio_mport_map_inbound(struct file *filp, void __user *arg)
1286{
1287 struct mport_cdev_priv *priv = filp->private_data;
1288 struct mport_dev *md = priv->md;
1289 struct rio_mmap map;
1290 struct rio_mport_mapping *mapping = NULL;
1291 int ret;
1292
1293 if (!md->mport->ops->map_inb)
1294 return -EPROTONOSUPPORT;
1295 if (unlikely(copy_from_user(&map, arg, sizeof(map))))
1296 return -EFAULT;
1297
1298 rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp);
1299
1300 ret = rio_mport_get_inbound_mapping(md, filp, map.rio_addr,
1301 map.length, &mapping);
1302 if (ret)
1303 return ret;
1304
1305 map.handle = mapping->phys_addr;
1306 map.rio_addr = mapping->rio_addr;
1307
1308 if (unlikely(copy_to_user(arg, &map, sizeof(map)))) {
1309 /* Delete mapping if it was created by this request */
1310 if (ret == 0 && mapping->filp == filp) {
1311 mutex_lock(&md->buf_mutex);
1312 kref_put(&mapping->ref, mport_release_mapping);
1313 mutex_unlock(&md->buf_mutex);
1314 }
1315 return -EFAULT;
1316 }
1317
1318 return 0;
1319}
1320
1321/*
1322 * rio_mport_inbound_free() - unmap from RapidIO address space and free
1323 * previously allocated inbound DMA coherent buffer
1324 * @priv: driver private data
1325 * @arg: buffer handle returned by allocation routine
1326 */
1327static int rio_mport_inbound_free(struct file *filp, void __user *arg)
1328{
1329 struct mport_cdev_priv *priv = filp->private_data;
1330 struct mport_dev *md = priv->md;
1331 u64 handle;
1332 struct rio_mport_mapping *map, *_map;
1333
1334 rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp);
1335
1336 if (!md->mport->ops->unmap_inb)
1337 return -EPROTONOSUPPORT;
1338
1339 if (copy_from_user(&handle, arg, sizeof(handle)))
1340 return -EFAULT;
1341
1342 mutex_lock(&md->buf_mutex);
1343 list_for_each_entry_safe(map, _map, &md->mappings, node) {
1344 if (map->dir == MAP_INBOUND && map->phys_addr == handle) {
1345 if (map->filp == filp) {
1346 map->filp = NULL;
1347 kref_put(&map->ref, mport_release_mapping);
1348 }
1349 break;
1350 }
1351 }
1352 mutex_unlock(&md->buf_mutex);
1353
1354 return 0;
1355}
1356
1357/*
1358 * maint_port_idx_get() - Get the port index of the mport instance
1359 * @priv: driver private data
1360 * @arg: port index
1361 */
1362static int maint_port_idx_get(struct mport_cdev_priv *priv, void __user *arg)
1363{
1364 struct mport_dev *md = priv->md;
1365 u32 port_idx = md->mport->index;
1366
1367 rmcd_debug(MPORT, "port_index=%d", port_idx);
1368
1369 if (copy_to_user(arg, &port_idx, sizeof(port_idx)))
1370 return -EFAULT;
1371
1372 return 0;
1373}
1374
1375static int rio_mport_add_event(struct mport_cdev_priv *priv,
1376 struct rio_event *event)
1377{
1378 int overflow;
1379
1380 if (!(priv->event_mask & event->header))
1381 return -EACCES;
1382
1383 spin_lock(&priv->fifo_lock);
1384 overflow = kfifo_avail(&priv->event_fifo) < sizeof(*event)
1385 || kfifo_in(&priv->event_fifo, (unsigned char *)event,
1386 sizeof(*event)) != sizeof(*event);
1387 spin_unlock(&priv->fifo_lock);
1388
1389 wake_up_interruptible(&priv->event_rx_wait);
1390
1391 if (overflow) {
1392 dev_warn(&priv->md->dev, DRV_NAME ": event fifo overflow\n");
1393 return -EBUSY;
1394 }
1395
1396 return 0;
1397}
1398
1399static void rio_mport_doorbell_handler(struct rio_mport *mport, void *dev_id,
1400 u16 src, u16 dst, u16 info)
1401{
1402 struct mport_dev *data = dev_id;
1403 struct mport_cdev_priv *priv;
1404 struct rio_mport_db_filter *db_filter;
1405 struct rio_event event;
1406 int handled;
1407
1408 event.header = RIO_DOORBELL;
1409 event.u.doorbell.rioid = src;
1410 event.u.doorbell.payload = info;
1411
1412 handled = 0;
1413 spin_lock(&data->db_lock);
1414 list_for_each_entry(db_filter, &data->doorbells, data_node) {
1415 if (((db_filter->filter.rioid == RIO_INVALID_DESTID ||
1416 db_filter->filter.rioid == src)) &&
1417 info >= db_filter->filter.low &&
1418 info <= db_filter->filter.high) {
1419 priv = db_filter->priv;
1420 rio_mport_add_event(priv, &event);
1421 handled = 1;
1422 }
1423 }
1424 spin_unlock(&data->db_lock);
1425
1426 if (!handled)
1427 dev_warn(&data->dev,
1428 "%s: spurious DB received from 0x%x, info=0x%04x\n",
1429 __func__, src, info);
1430}
1431
1432static int rio_mport_add_db_filter(struct mport_cdev_priv *priv,
1433 void __user *arg)
1434{
1435 struct mport_dev *md = priv->md;
1436 struct rio_mport_db_filter *db_filter;
1437 struct rio_doorbell_filter filter;
1438 unsigned long flags;
1439 int ret;
1440
1441 if (copy_from_user(&filter, arg, sizeof(filter)))
1442 return -EFAULT;
1443
1444 if (filter.low > filter.high)
1445 return -EINVAL;
1446
1447 ret = rio_request_inb_dbell(md->mport, md, filter.low, filter.high,
1448 rio_mport_doorbell_handler);
1449 if (ret) {
1450 rmcd_error("%s failed to register IBDB, err=%d",
1451 dev_name(&md->dev), ret);
1452 return ret;
1453 }
1454
1455 db_filter = kzalloc(sizeof(*db_filter), GFP_KERNEL);
1456 if (db_filter == NULL) {
1457 rio_release_inb_dbell(md->mport, filter.low, filter.high);
1458 return -ENOMEM;
1459 }
1460
1461 db_filter->filter = filter;
1462 db_filter->priv = priv;
1463 spin_lock_irqsave(&md->db_lock, flags);
1464 list_add_tail(&db_filter->priv_node, &priv->db_filters);
1465 list_add_tail(&db_filter->data_node, &md->doorbells);
1466 spin_unlock_irqrestore(&md->db_lock, flags);
1467
1468 return 0;
1469}
1470
1471static void rio_mport_delete_db_filter(struct rio_mport_db_filter *db_filter)
1472{
1473 list_del(&db_filter->data_node);
1474 list_del(&db_filter->priv_node);
1475 kfree(db_filter);
1476}
1477
1478static int rio_mport_remove_db_filter(struct mport_cdev_priv *priv,
1479 void __user *arg)
1480{
1481 struct rio_mport_db_filter *db_filter;
1482 struct rio_doorbell_filter filter;
1483 unsigned long flags;
1484 int ret = -EINVAL;
1485
1486 if (copy_from_user(&filter, arg, sizeof(filter)))
1487 return -EFAULT;
1488
1489 if (filter.low > filter.high)
1490 return -EINVAL;
1491
1492 spin_lock_irqsave(&priv->md->db_lock, flags);
1493 list_for_each_entry(db_filter, &priv->db_filters, priv_node) {
1494 if (db_filter->filter.rioid == filter.rioid &&
1495 db_filter->filter.low == filter.low &&
1496 db_filter->filter.high == filter.high) {
1497 rio_mport_delete_db_filter(db_filter);
1498 ret = 0;
1499 break;
1500 }
1501 }
1502 spin_unlock_irqrestore(&priv->md->db_lock, flags);
1503
1504 if (!ret)
1505 rio_release_inb_dbell(priv->md->mport, filter.low, filter.high);
1506
1507 return ret;
1508}
1509
1510static int rio_mport_match_pw(union rio_pw_msg *msg,
1511 struct rio_pw_filter *filter)
1512{
1513 if ((msg->em.comptag & filter->mask) < filter->low ||
1514 (msg->em.comptag & filter->mask) > filter->high)
1515 return 0;
1516 return 1;
1517}
1518
1519static int rio_mport_pw_handler(struct rio_mport *mport, void *context,
1520 union rio_pw_msg *msg, int step)
1521{
1522 struct mport_dev *md = context;
1523 struct mport_cdev_priv *priv;
1524 struct rio_mport_pw_filter *pw_filter;
1525 struct rio_event event;
1526 int handled;
1527
1528 event.header = RIO_PORTWRITE;
1529 memcpy(event.u.portwrite.payload, msg->raw, RIO_PW_MSG_SIZE);
1530
1531 handled = 0;
1532 spin_lock(&md->pw_lock);
1533 list_for_each_entry(pw_filter, &md->portwrites, md_node) {
1534 if (rio_mport_match_pw(msg, &pw_filter->filter)) {
1535 priv = pw_filter->priv;
1536 rio_mport_add_event(priv, &event);
1537 handled = 1;
1538 }
1539 }
1540 spin_unlock(&md->pw_lock);
1541
1542 if (!handled) {
1543 printk_ratelimited(KERN_WARNING DRV_NAME
1544 ": mport%d received spurious PW from 0x%08x\n",
1545 mport->id, msg->em.comptag);
1546 }
1547
1548 return 0;
1549}
1550
1551static int rio_mport_add_pw_filter(struct mport_cdev_priv *priv,
1552 void __user *arg)
1553{
1554 struct mport_dev *md = priv->md;
1555 struct rio_mport_pw_filter *pw_filter;
1556 struct rio_pw_filter filter;
1557 unsigned long flags;
1558 int hadd = 0;
1559
1560 if (copy_from_user(&filter, arg, sizeof(filter)))
1561 return -EFAULT;
1562
1563 pw_filter = kzalloc(sizeof(*pw_filter), GFP_KERNEL);
1564 if (pw_filter == NULL)
1565 return -ENOMEM;
1566
1567 pw_filter->filter = filter;
1568 pw_filter->priv = priv;
1569 spin_lock_irqsave(&md->pw_lock, flags);
1570 if (list_empty(&md->portwrites))
1571 hadd = 1;
1572 list_add_tail(&pw_filter->priv_node, &priv->pw_filters);
1573 list_add_tail(&pw_filter->md_node, &md->portwrites);
1574 spin_unlock_irqrestore(&md->pw_lock, flags);
1575
1576 if (hadd) {
1577 int ret;
1578
1579 ret = rio_add_mport_pw_handler(md->mport, md,
1580 rio_mport_pw_handler);
1581 if (ret) {
1582 dev_err(&md->dev,
1583 "%s: failed to add IB_PW handler, err=%d\n",
1584 __func__, ret);
1585 return ret;
1586 }
1587 rio_pw_enable(md->mport, 1);
1588 }
1589
1590 return 0;
1591}
1592
1593static void rio_mport_delete_pw_filter(struct rio_mport_pw_filter *pw_filter)
1594{
1595 list_del(&pw_filter->md_node);
1596 list_del(&pw_filter->priv_node);
1597 kfree(pw_filter);
1598}
1599
1600static int rio_mport_match_pw_filter(struct rio_pw_filter *a,
1601 struct rio_pw_filter *b)
1602{
1603 if ((a->mask == b->mask) && (a->low == b->low) && (a->high == b->high))
1604 return 1;
1605 return 0;
1606}
1607
1608static int rio_mport_remove_pw_filter(struct mport_cdev_priv *priv,
1609 void __user *arg)
1610{
1611 struct mport_dev *md = priv->md;
1612 struct rio_mport_pw_filter *pw_filter;
1613 struct rio_pw_filter filter;
1614 unsigned long flags;
1615 int ret = -EINVAL;
1616 int hdel = 0;
1617
1618 if (copy_from_user(&filter, arg, sizeof(filter)))
1619 return -EFAULT;
1620
1621 spin_lock_irqsave(&md->pw_lock, flags);
1622 list_for_each_entry(pw_filter, &priv->pw_filters, priv_node) {
1623 if (rio_mport_match_pw_filter(&pw_filter->filter, &filter)) {
1624 rio_mport_delete_pw_filter(pw_filter);
1625 ret = 0;
1626 break;
1627 }
1628 }
1629
1630 if (list_empty(&md->portwrites))
1631 hdel = 1;
1632 spin_unlock_irqrestore(&md->pw_lock, flags);
1633
1634 if (hdel) {
1635 rio_del_mport_pw_handler(md->mport, priv->md,
1636 rio_mport_pw_handler);
1637 rio_pw_enable(md->mport, 0);
1638 }
1639
1640 return ret;
1641}
1642
1643/*
1644 * rio_release_dev - release routine for kernel RIO device object
1645 * @dev: kernel device object associated with a RIO device structure
1646 *
1647 * Frees a RIO device struct associated a RIO device struct.
1648 * The RIO device struct is freed.
1649 */
1650static void rio_release_dev(struct device *dev)
1651{
1652 struct rio_dev *rdev;
1653
1654 rdev = to_rio_dev(dev);
1655 pr_info(DRV_PREFIX "%s: %s\n", __func__, rio_name(rdev));
1656 kfree(rdev);
1657}
1658
1659
1660static void rio_release_net(struct device *dev)
1661{
1662 struct rio_net *net;
1663
1664 net = to_rio_net(dev);
1665 rmcd_debug(RDEV, "net_%d", net->id);
1666 kfree(net);
1667}
1668
1669
1670/*
1671 * rio_mport_add_riodev - creates a kernel RIO device object
1672 *
1673 * Allocates a RIO device data structure and initializes required fields based
1674 * on device's configuration space contents.
1675 * If the device has switch capabilities, then a switch specific portion is
1676 * allocated and configured.
1677 */
1678static int rio_mport_add_riodev(struct mport_cdev_priv *priv,
1679 void __user *arg)
1680{
1681 struct mport_dev *md = priv->md;
1682 struct rio_rdev_info dev_info;
1683 struct rio_dev *rdev;
1684 struct rio_switch *rswitch = NULL;
1685 struct rio_mport *mport;
1686 struct device *dev;
1687 size_t size;
1688 u32 rval;
1689 u32 swpinfo = 0;
1690 u16 destid;
1691 u8 hopcount;
1692 int err;
1693
1694 if (copy_from_user(&dev_info, arg, sizeof(dev_info)))
1695 return -EFAULT;
1696 dev_info.name[sizeof(dev_info.name) - 1] = '\0';
1697
1698 rmcd_debug(RDEV, "name:%s ct:0x%x did:0x%x hc:0x%x", dev_info.name,
1699 dev_info.comptag, dev_info.destid, dev_info.hopcount);
1700
1701 dev = bus_find_device_by_name(&rio_bus_type, NULL, dev_info.name);
1702 if (dev) {
1703 rmcd_debug(RDEV, "device %s already exists", dev_info.name);
1704 put_device(dev);
1705 return -EEXIST;
1706 }
1707
1708 size = sizeof(*rdev);
1709 mport = md->mport;
1710 destid = dev_info.destid;
1711 hopcount = dev_info.hopcount;
1712
1713 if (rio_mport_read_config_32(mport, destid, hopcount,
1714 RIO_PEF_CAR, &rval))
1715 return -EIO;
1716
1717 if (rval & RIO_PEF_SWITCH) {
1718 rio_mport_read_config_32(mport, destid, hopcount,
1719 RIO_SWP_INFO_CAR, &swpinfo);
1720 size += struct_size(rswitch, nextdev, RIO_GET_TOTAL_PORTS(swpinfo));
1721 }
1722
1723 rdev = kzalloc(size, GFP_KERNEL);
1724 if (rdev == NULL)
1725 return -ENOMEM;
1726
1727 if (mport->net == NULL) {
1728 struct rio_net *net;
1729
1730 net = rio_alloc_net(mport);
1731 if (!net) {
1732 err = -ENOMEM;
1733 rmcd_debug(RDEV, "failed to allocate net object");
1734 goto cleanup;
1735 }
1736
1737 net->id = mport->id;
1738 net->hport = mport;
1739 dev_set_name(&net->dev, "rnet_%d", net->id);
1740 net->dev.parent = &mport->dev;
1741 net->dev.release = rio_release_net;
1742 err = rio_add_net(net);
1743 if (err) {
1744 rmcd_debug(RDEV, "failed to register net, err=%d", err);
1745 put_device(&net->dev);
1746 mport->net = NULL;
1747 goto cleanup;
1748 }
1749 }
1750
1751 rdev->net = mport->net;
1752 rdev->pef = rval;
1753 rdev->swpinfo = swpinfo;
1754 rio_mport_read_config_32(mport, destid, hopcount,
1755 RIO_DEV_ID_CAR, &rval);
1756 rdev->did = rval >> 16;
1757 rdev->vid = rval & 0xffff;
1758 rio_mport_read_config_32(mport, destid, hopcount, RIO_DEV_INFO_CAR,
1759 &rdev->device_rev);
1760 rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_ID_CAR,
1761 &rval);
1762 rdev->asm_did = rval >> 16;
1763 rdev->asm_vid = rval & 0xffff;
1764 rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_INFO_CAR,
1765 &rval);
1766 rdev->asm_rev = rval >> 16;
1767
1768 if (rdev->pef & RIO_PEF_EXT_FEATURES) {
1769 rdev->efptr = rval & 0xffff;
1770 rdev->phys_efptr = rio_mport_get_physefb(mport, 0, destid,
1771 hopcount, &rdev->phys_rmap);
1772
1773 rdev->em_efptr = rio_mport_get_feature(mport, 0, destid,
1774 hopcount, RIO_EFB_ERR_MGMNT);
1775 }
1776
1777 rio_mport_read_config_32(mport, destid, hopcount, RIO_SRC_OPS_CAR,
1778 &rdev->src_ops);
1779 rio_mport_read_config_32(mport, destid, hopcount, RIO_DST_OPS_CAR,
1780 &rdev->dst_ops);
1781
1782 rdev->comp_tag = dev_info.comptag;
1783 rdev->destid = destid;
1784 /* hopcount is stored as specified by a caller, regardles of EP or SW */
1785 rdev->hopcount = hopcount;
1786
1787 if (rdev->pef & RIO_PEF_SWITCH) {
1788 rswitch = rdev->rswitch;
1789 rswitch->route_table = NULL;
1790 }
1791
1792 if (strlen(dev_info.name))
1793 dev_set_name(&rdev->dev, "%s", dev_info.name);
1794 else if (rdev->pef & RIO_PEF_SWITCH)
1795 dev_set_name(&rdev->dev, "%02x:s:%04x", mport->id,
1796 rdev->comp_tag & RIO_CTAG_UDEVID);
1797 else
1798 dev_set_name(&rdev->dev, "%02x:e:%04x", mport->id,
1799 rdev->comp_tag & RIO_CTAG_UDEVID);
1800
1801 INIT_LIST_HEAD(&rdev->net_list);
1802 rdev->dev.parent = &mport->net->dev;
1803 rio_attach_device(rdev);
1804 rdev->dev.release = rio_release_dev;
1805
1806 if (rdev->dst_ops & RIO_DST_OPS_DOORBELL)
1807 rio_init_dbell_res(&rdev->riores[RIO_DOORBELL_RESOURCE],
1808 0, 0xffff);
1809 err = rio_add_device(rdev);
1810 if (err) {
1811 put_device(&rdev->dev);
1812 return err;
1813 }
1814
1815 rio_dev_get(rdev);
1816
1817 return 0;
1818cleanup:
1819 kfree(rdev);
1820 return err;
1821}
1822
1823static int rio_mport_del_riodev(struct mport_cdev_priv *priv, void __user *arg)
1824{
1825 struct rio_rdev_info dev_info;
1826 struct rio_dev *rdev = NULL;
1827 struct device *dev;
1828 struct rio_mport *mport;
1829 struct rio_net *net;
1830
1831 if (copy_from_user(&dev_info, arg, sizeof(dev_info)))
1832 return -EFAULT;
1833 dev_info.name[sizeof(dev_info.name) - 1] = '\0';
1834
1835 mport = priv->md->mport;
1836
1837 /* If device name is specified, removal by name has priority */
1838 if (strlen(dev_info.name)) {
1839 dev = bus_find_device_by_name(&rio_bus_type, NULL,
1840 dev_info.name);
1841 if (dev)
1842 rdev = to_rio_dev(dev);
1843 } else {
1844 do {
1845 rdev = rio_get_comptag(dev_info.comptag, rdev);
1846 if (rdev && rdev->dev.parent == &mport->net->dev &&
1847 rdev->destid == dev_info.destid &&
1848 rdev->hopcount == dev_info.hopcount)
1849 break;
1850 } while (rdev);
1851 }
1852
1853 if (!rdev) {
1854 rmcd_debug(RDEV,
1855 "device name:%s ct:0x%x did:0x%x hc:0x%x not found",
1856 dev_info.name, dev_info.comptag, dev_info.destid,
1857 dev_info.hopcount);
1858 return -ENODEV;
1859 }
1860
1861 net = rdev->net;
1862 rio_dev_put(rdev);
1863 rio_del_device(rdev, RIO_DEVICE_SHUTDOWN);
1864
1865 if (list_empty(&net->devices)) {
1866 rio_free_net(net);
1867 mport->net = NULL;
1868 }
1869
1870 return 0;
1871}
1872
1873/*
1874 * Mport cdev management
1875 */
1876
1877/*
1878 * mport_cdev_open() - Open character device (mport)
1879 */
1880static int mport_cdev_open(struct inode *inode, struct file *filp)
1881{
1882 int ret;
1883 int minor = iminor(inode);
1884 struct mport_dev *chdev;
1885 struct mport_cdev_priv *priv;
1886
1887 /* Test for valid device */
1888 if (minor >= RIO_MAX_MPORTS) {
1889 rmcd_error("Invalid minor device number");
1890 return -EINVAL;
1891 }
1892
1893 chdev = container_of(inode->i_cdev, struct mport_dev, cdev);
1894
1895 rmcd_debug(INIT, "%s filp=%p", dev_name(&chdev->dev), filp);
1896
1897 if (atomic_read(&chdev->active) == 0)
1898 return -ENODEV;
1899
1900 get_device(&chdev->dev);
1901
1902 priv = kzalloc(sizeof(*priv), GFP_KERNEL);
1903 if (!priv) {
1904 put_device(&chdev->dev);
1905 return -ENOMEM;
1906 }
1907
1908 priv->md = chdev;
1909
1910 INIT_LIST_HEAD(&priv->db_filters);
1911 INIT_LIST_HEAD(&priv->pw_filters);
1912 spin_lock_init(&priv->fifo_lock);
1913 init_waitqueue_head(&priv->event_rx_wait);
1914 ret = kfifo_alloc(&priv->event_fifo,
1915 sizeof(struct rio_event) * MPORT_EVENT_DEPTH,
1916 GFP_KERNEL);
1917 if (ret < 0) {
1918 put_device(&chdev->dev);
1919 dev_err(&chdev->dev, DRV_NAME ": kfifo_alloc failed\n");
1920 ret = -ENOMEM;
1921 goto err_fifo;
1922 }
1923
1924#ifdef CONFIG_RAPIDIO_DMA_ENGINE
1925 INIT_LIST_HEAD(&priv->async_list);
1926 spin_lock_init(&priv->req_lock);
1927 mutex_init(&priv->dma_lock);
1928#endif
1929 mutex_lock(&chdev->file_mutex);
1930 list_add_tail(&priv->list, &chdev->file_list);
1931 mutex_unlock(&chdev->file_mutex);
1932
1933 filp->private_data = priv;
1934 goto out;
1935err_fifo:
1936 kfree(priv);
1937out:
1938 return ret;
1939}
1940
1941static int mport_cdev_fasync(int fd, struct file *filp, int mode)
1942{
1943 struct mport_cdev_priv *priv = filp->private_data;
1944
1945 return fasync_helper(fd, filp, mode, &priv->async_queue);
1946}
1947
1948#ifdef CONFIG_RAPIDIO_DMA_ENGINE
1949static void mport_cdev_release_dma(struct file *filp)
1950{
1951 struct mport_cdev_priv *priv = filp->private_data;
1952 struct mport_dev *md;
1953 struct mport_dma_req *req, *req_next;
1954 unsigned long tmo = msecs_to_jiffies(dma_timeout);
1955 long wret;
1956 LIST_HEAD(list);
1957
1958 rmcd_debug(EXIT, "from filp=%p %s(%d)",
1959 filp, current->comm, task_pid_nr(current));
1960
1961 if (!priv->dmach) {
1962 rmcd_debug(EXIT, "No DMA channel for filp=%p", filp);
1963 return;
1964 }
1965
1966 md = priv->md;
1967
1968 spin_lock(&priv->req_lock);
1969 if (!list_empty(&priv->async_list)) {
1970 rmcd_debug(EXIT, "async list not empty filp=%p %s(%d)",
1971 filp, current->comm, task_pid_nr(current));
1972 list_splice_init(&priv->async_list, &list);
1973 }
1974 spin_unlock(&priv->req_lock);
1975
1976 if (!list_empty(&list)) {
1977 rmcd_debug(EXIT, "temp list not empty");
1978 list_for_each_entry_safe(req, req_next, &list, node) {
1979 rmcd_debug(EXIT, "free req->filp=%p cookie=%d compl=%s",
1980 req->filp, req->cookie,
1981 completion_done(&req->req_comp)?"yes":"no");
1982 list_del(&req->node);
1983 kref_put(&req->refcount, dma_req_free);
1984 }
1985 }
1986
1987 put_dma_channel(priv);
1988 wret = wait_for_completion_interruptible_timeout(&priv->comp, tmo);
1989
1990 if (wret <= 0) {
1991 rmcd_error("%s(%d) failed waiting for DMA release err=%ld",
1992 current->comm, task_pid_nr(current), wret);
1993 }
1994
1995 if (priv->dmach != priv->md->dma_chan) {
1996 rmcd_debug(EXIT, "Release DMA channel for filp=%p %s(%d)",
1997 filp, current->comm, task_pid_nr(current));
1998 rio_release_dma(priv->dmach);
1999 } else {
2000 rmcd_debug(EXIT, "Adjust default DMA channel refcount");
2001 kref_put(&md->dma_ref, mport_release_def_dma);
2002 }
2003
2004 priv->dmach = NULL;
2005}
2006#else
2007#define mport_cdev_release_dma(priv) do {} while (0)
2008#endif
2009
2010/*
2011 * mport_cdev_release() - Release character device
2012 */
2013static int mport_cdev_release(struct inode *inode, struct file *filp)
2014{
2015 struct mport_cdev_priv *priv = filp->private_data;
2016 struct mport_dev *chdev;
2017 struct rio_mport_pw_filter *pw_filter, *pw_filter_next;
2018 struct rio_mport_db_filter *db_filter, *db_filter_next;
2019 struct rio_mport_mapping *map, *_map;
2020 unsigned long flags;
2021
2022 rmcd_debug(EXIT, "%s filp=%p", dev_name(&priv->md->dev), filp);
2023
2024 chdev = priv->md;
2025 mport_cdev_release_dma(filp);
2026
2027 priv->event_mask = 0;
2028
2029 spin_lock_irqsave(&chdev->pw_lock, flags);
2030 if (!list_empty(&priv->pw_filters)) {
2031 list_for_each_entry_safe(pw_filter, pw_filter_next,
2032 &priv->pw_filters, priv_node)
2033 rio_mport_delete_pw_filter(pw_filter);
2034 }
2035 spin_unlock_irqrestore(&chdev->pw_lock, flags);
2036
2037 spin_lock_irqsave(&chdev->db_lock, flags);
2038 list_for_each_entry_safe(db_filter, db_filter_next,
2039 &priv->db_filters, priv_node) {
2040 rio_mport_delete_db_filter(db_filter);
2041 }
2042 spin_unlock_irqrestore(&chdev->db_lock, flags);
2043
2044 kfifo_free(&priv->event_fifo);
2045
2046 mutex_lock(&chdev->buf_mutex);
2047 list_for_each_entry_safe(map, _map, &chdev->mappings, node) {
2048 if (map->filp == filp) {
2049 rmcd_debug(EXIT, "release mapping %p filp=%p",
2050 map->virt_addr, filp);
2051 kref_put(&map->ref, mport_release_mapping);
2052 }
2053 }
2054 mutex_unlock(&chdev->buf_mutex);
2055
2056 mport_cdev_fasync(-1, filp, 0);
2057 filp->private_data = NULL;
2058 mutex_lock(&chdev->file_mutex);
2059 list_del(&priv->list);
2060 mutex_unlock(&chdev->file_mutex);
2061 put_device(&chdev->dev);
2062 kfree(priv);
2063 return 0;
2064}
2065
2066/*
2067 * mport_cdev_ioctl() - IOCTLs for character device
2068 */
2069static long mport_cdev_ioctl(struct file *filp,
2070 unsigned int cmd, unsigned long arg)
2071{
2072 int err = -EINVAL;
2073 struct mport_cdev_priv *data = filp->private_data;
2074 struct mport_dev *md = data->md;
2075
2076 if (atomic_read(&md->active) == 0)
2077 return -ENODEV;
2078
2079 switch (cmd) {
2080 case RIO_MPORT_MAINT_READ_LOCAL:
2081 return rio_mport_maint_rd(data, (void __user *)arg, 1);
2082 case RIO_MPORT_MAINT_WRITE_LOCAL:
2083 return rio_mport_maint_wr(data, (void __user *)arg, 1);
2084 case RIO_MPORT_MAINT_READ_REMOTE:
2085 return rio_mport_maint_rd(data, (void __user *)arg, 0);
2086 case RIO_MPORT_MAINT_WRITE_REMOTE:
2087 return rio_mport_maint_wr(data, (void __user *)arg, 0);
2088 case RIO_MPORT_MAINT_HDID_SET:
2089 return maint_hdid_set(data, (void __user *)arg);
2090 case RIO_MPORT_MAINT_COMPTAG_SET:
2091 return maint_comptag_set(data, (void __user *)arg);
2092 case RIO_MPORT_MAINT_PORT_IDX_GET:
2093 return maint_port_idx_get(data, (void __user *)arg);
2094 case RIO_MPORT_GET_PROPERTIES:
2095 md->properties.hdid = md->mport->host_deviceid;
2096 if (copy_to_user((void __user *)arg, &(md->properties),
2097 sizeof(md->properties)))
2098 return -EFAULT;
2099 return 0;
2100 case RIO_ENABLE_DOORBELL_RANGE:
2101 return rio_mport_add_db_filter(data, (void __user *)arg);
2102 case RIO_DISABLE_DOORBELL_RANGE:
2103 return rio_mport_remove_db_filter(data, (void __user *)arg);
2104 case RIO_ENABLE_PORTWRITE_RANGE:
2105 return rio_mport_add_pw_filter(data, (void __user *)arg);
2106 case RIO_DISABLE_PORTWRITE_RANGE:
2107 return rio_mport_remove_pw_filter(data, (void __user *)arg);
2108 case RIO_SET_EVENT_MASK:
2109 data->event_mask = (u32)arg;
2110 return 0;
2111 case RIO_GET_EVENT_MASK:
2112 if (copy_to_user((void __user *)arg, &data->event_mask,
2113 sizeof(u32)))
2114 return -EFAULT;
2115 return 0;
2116 case RIO_MAP_OUTBOUND:
2117 return rio_mport_obw_map(filp, (void __user *)arg);
2118 case RIO_MAP_INBOUND:
2119 return rio_mport_map_inbound(filp, (void __user *)arg);
2120 case RIO_UNMAP_OUTBOUND:
2121 return rio_mport_obw_free(filp, (void __user *)arg);
2122 case RIO_UNMAP_INBOUND:
2123 return rio_mport_inbound_free(filp, (void __user *)arg);
2124 case RIO_ALLOC_DMA:
2125 return rio_mport_alloc_dma(filp, (void __user *)arg);
2126 case RIO_FREE_DMA:
2127 return rio_mport_free_dma(filp, (void __user *)arg);
2128 case RIO_WAIT_FOR_ASYNC:
2129 return rio_mport_wait_for_async_dma(filp, (void __user *)arg);
2130 case RIO_TRANSFER:
2131 return rio_mport_transfer_ioctl(filp, (void __user *)arg);
2132 case RIO_DEV_ADD:
2133 return rio_mport_add_riodev(data, (void __user *)arg);
2134 case RIO_DEV_DEL:
2135 return rio_mport_del_riodev(data, (void __user *)arg);
2136 default:
2137 break;
2138 }
2139
2140 return err;
2141}
2142
2143/*
2144 * mport_release_mapping - free mapping resources and info structure
2145 * @ref: a pointer to the kref within struct rio_mport_mapping
2146 *
2147 * NOTE: Shall be called while holding buf_mutex.
2148 */
2149static void mport_release_mapping(struct kref *ref)
2150{
2151 struct rio_mport_mapping *map =
2152 container_of(ref, struct rio_mport_mapping, ref);
2153 struct rio_mport *mport = map->md->mport;
2154
2155 rmcd_debug(MMAP, "type %d mapping @ %p (phys = %pad) for %s",
2156 map->dir, map->virt_addr,
2157 &map->phys_addr, mport->name);
2158
2159 list_del(&map->node);
2160
2161 switch (map->dir) {
2162 case MAP_INBOUND:
2163 rio_unmap_inb_region(mport, map->phys_addr);
2164 fallthrough;
2165 case MAP_DMA:
2166 dma_free_coherent(mport->dev.parent, map->size,
2167 map->virt_addr, map->phys_addr);
2168 break;
2169 case MAP_OUTBOUND:
2170 rio_unmap_outb_region(mport, map->rioid, map->rio_addr);
2171 break;
2172 }
2173 kfree(map);
2174}
2175
2176static void mport_mm_open(struct vm_area_struct *vma)
2177{
2178 struct rio_mport_mapping *map = vma->vm_private_data;
2179
2180 rmcd_debug(MMAP, "%pad", &map->phys_addr);
2181 kref_get(&map->ref);
2182}
2183
2184static void mport_mm_close(struct vm_area_struct *vma)
2185{
2186 struct rio_mport_mapping *map = vma->vm_private_data;
2187
2188 rmcd_debug(MMAP, "%pad", &map->phys_addr);
2189 mutex_lock(&map->md->buf_mutex);
2190 kref_put(&map->ref, mport_release_mapping);
2191 mutex_unlock(&map->md->buf_mutex);
2192}
2193
2194static const struct vm_operations_struct vm_ops = {
2195 .open = mport_mm_open,
2196 .close = mport_mm_close,
2197};
2198
2199static int mport_cdev_mmap(struct file *filp, struct vm_area_struct *vma)
2200{
2201 struct mport_cdev_priv *priv = filp->private_data;
2202 struct mport_dev *md;
2203 size_t size = vma->vm_end - vma->vm_start;
2204 dma_addr_t baddr;
2205 unsigned long offset;
2206 int found = 0, ret;
2207 struct rio_mport_mapping *map;
2208
2209 rmcd_debug(MMAP, "0x%x bytes at offset 0x%lx",
2210 (unsigned int)size, vma->vm_pgoff);
2211
2212 md = priv->md;
2213 baddr = ((dma_addr_t)vma->vm_pgoff << PAGE_SHIFT);
2214
2215 mutex_lock(&md->buf_mutex);
2216 list_for_each_entry(map, &md->mappings, node) {
2217 if (baddr >= map->phys_addr &&
2218 baddr < (map->phys_addr + map->size)) {
2219 found = 1;
2220 break;
2221 }
2222 }
2223 mutex_unlock(&md->buf_mutex);
2224
2225 if (!found)
2226 return -ENOMEM;
2227
2228 offset = baddr - map->phys_addr;
2229
2230 if (size + offset > map->size)
2231 return -EINVAL;
2232
2233 vma->vm_pgoff = offset >> PAGE_SHIFT;
2234 rmcd_debug(MMAP, "MMAP adjusted offset = 0x%lx", vma->vm_pgoff);
2235
2236 if (map->dir == MAP_INBOUND || map->dir == MAP_DMA)
2237 ret = dma_mmap_coherent(md->mport->dev.parent, vma,
2238 map->virt_addr, map->phys_addr, map->size);
2239 else if (map->dir == MAP_OUTBOUND) {
2240 vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
2241 ret = vm_iomap_memory(vma, map->phys_addr, map->size);
2242 } else {
2243 rmcd_error("Attempt to mmap unsupported mapping type");
2244 ret = -EIO;
2245 }
2246
2247 if (!ret) {
2248 vma->vm_private_data = map;
2249 vma->vm_ops = &vm_ops;
2250 mport_mm_open(vma);
2251 } else {
2252 rmcd_error("MMAP exit with err=%d", ret);
2253 }
2254
2255 return ret;
2256}
2257
2258static __poll_t mport_cdev_poll(struct file *filp, poll_table *wait)
2259{
2260 struct mport_cdev_priv *priv = filp->private_data;
2261
2262 poll_wait(filp, &priv->event_rx_wait, wait);
2263 if (kfifo_len(&priv->event_fifo))
2264 return EPOLLIN | EPOLLRDNORM;
2265
2266 return 0;
2267}
2268
2269static ssize_t mport_read(struct file *filp, char __user *buf, size_t count,
2270 loff_t *ppos)
2271{
2272 struct mport_cdev_priv *priv = filp->private_data;
2273 int copied;
2274 ssize_t ret;
2275
2276 if (!count)
2277 return 0;
2278
2279 if (kfifo_is_empty(&priv->event_fifo) &&
2280 (filp->f_flags & O_NONBLOCK))
2281 return -EAGAIN;
2282
2283 if (count % sizeof(struct rio_event))
2284 return -EINVAL;
2285
2286 ret = wait_event_interruptible(priv->event_rx_wait,
2287 kfifo_len(&priv->event_fifo) != 0);
2288 if (ret)
2289 return ret;
2290
2291 while (ret < count) {
2292 if (kfifo_to_user(&priv->event_fifo, buf,
2293 sizeof(struct rio_event), &copied))
2294 return -EFAULT;
2295 ret += copied;
2296 buf += copied;
2297 }
2298
2299 return ret;
2300}
2301
2302static ssize_t mport_write(struct file *filp, const char __user *buf,
2303 size_t count, loff_t *ppos)
2304{
2305 struct mport_cdev_priv *priv = filp->private_data;
2306 struct rio_mport *mport = priv->md->mport;
2307 struct rio_event event;
2308 int len, ret;
2309
2310 if (!count)
2311 return 0;
2312
2313 if (count % sizeof(event))
2314 return -EINVAL;
2315
2316 len = 0;
2317 while ((count - len) >= (int)sizeof(event)) {
2318 if (copy_from_user(&event, buf, sizeof(event)))
2319 return -EFAULT;
2320
2321 if (event.header != RIO_DOORBELL)
2322 return -EINVAL;
2323
2324 ret = rio_mport_send_doorbell(mport,
2325 event.u.doorbell.rioid,
2326 event.u.doorbell.payload);
2327 if (ret < 0)
2328 return ret;
2329
2330 len += sizeof(event);
2331 buf += sizeof(event);
2332 }
2333
2334 return len;
2335}
2336
2337static const struct file_operations mport_fops = {
2338 .owner = THIS_MODULE,
2339 .open = mport_cdev_open,
2340 .release = mport_cdev_release,
2341 .poll = mport_cdev_poll,
2342 .read = mport_read,
2343 .write = mport_write,
2344 .mmap = mport_cdev_mmap,
2345 .fasync = mport_cdev_fasync,
2346 .unlocked_ioctl = mport_cdev_ioctl
2347};
2348
2349/*
2350 * Character device management
2351 */
2352
2353static void mport_device_release(struct device *dev)
2354{
2355 struct mport_dev *md;
2356
2357 rmcd_debug(EXIT, "%s", dev_name(dev));
2358 md = container_of(dev, struct mport_dev, dev);
2359 kfree(md);
2360}
2361
2362/*
2363 * mport_cdev_add() - Create mport_dev from rio_mport
2364 * @mport: RapidIO master port
2365 */
2366static struct mport_dev *mport_cdev_add(struct rio_mport *mport)
2367{
2368 int ret = 0;
2369 struct mport_dev *md;
2370 struct rio_mport_attr attr;
2371
2372 md = kzalloc(sizeof(*md), GFP_KERNEL);
2373 if (!md) {
2374 rmcd_error("Unable allocate a device object");
2375 return NULL;
2376 }
2377
2378 md->mport = mport;
2379 mutex_init(&md->buf_mutex);
2380 mutex_init(&md->file_mutex);
2381 INIT_LIST_HEAD(&md->file_list);
2382
2383 device_initialize(&md->dev);
2384 md->dev.devt = MKDEV(MAJOR(dev_number), mport->id);
2385 md->dev.class = &dev_class;
2386 md->dev.parent = &mport->dev;
2387 md->dev.release = mport_device_release;
2388 dev_set_name(&md->dev, DEV_NAME "%d", mport->id);
2389 atomic_set(&md->active, 1);
2390
2391 cdev_init(&md->cdev, &mport_fops);
2392 md->cdev.owner = THIS_MODULE;
2393
2394 INIT_LIST_HEAD(&md->doorbells);
2395 spin_lock_init(&md->db_lock);
2396 INIT_LIST_HEAD(&md->portwrites);
2397 spin_lock_init(&md->pw_lock);
2398 INIT_LIST_HEAD(&md->mappings);
2399
2400 md->properties.id = mport->id;
2401 md->properties.sys_size = mport->sys_size;
2402 md->properties.hdid = mport->host_deviceid;
2403 md->properties.index = mport->index;
2404
2405 /* The transfer_mode property will be returned through mport query
2406 * interface
2407 */
2408#ifdef CONFIG_FSL_RIO /* for now: only on Freescale's SoCs */
2409 md->properties.transfer_mode |= RIO_TRANSFER_MODE_MAPPED;
2410#else
2411 md->properties.transfer_mode |= RIO_TRANSFER_MODE_TRANSFER;
2412#endif
2413
2414 ret = cdev_device_add(&md->cdev, &md->dev);
2415 if (ret) {
2416 rmcd_error("Failed to register mport %d (err=%d)",
2417 mport->id, ret);
2418 goto err_cdev;
2419 }
2420 ret = rio_query_mport(mport, &attr);
2421 if (!ret) {
2422 md->properties.flags = attr.flags;
2423 md->properties.link_speed = attr.link_speed;
2424 md->properties.link_width = attr.link_width;
2425 md->properties.dma_max_sge = attr.dma_max_sge;
2426 md->properties.dma_max_size = attr.dma_max_size;
2427 md->properties.dma_align = attr.dma_align;
2428 md->properties.cap_sys_size = 0;
2429 md->properties.cap_transfer_mode = 0;
2430 md->properties.cap_addr_size = 0;
2431 } else
2432 pr_info(DRV_PREFIX "Failed to obtain info for %s cdev(%d:%d)\n",
2433 mport->name, MAJOR(dev_number), mport->id);
2434
2435 mutex_lock(&mport_devs_lock);
2436 list_add_tail(&md->node, &mport_devs);
2437 mutex_unlock(&mport_devs_lock);
2438
2439 pr_info(DRV_PREFIX "Added %s cdev(%d:%d)\n",
2440 mport->name, MAJOR(dev_number), mport->id);
2441
2442 return md;
2443
2444err_cdev:
2445 put_device(&md->dev);
2446 return NULL;
2447}
2448
2449/*
2450 * mport_cdev_terminate_dma() - Stop all active DMA data transfers and release
2451 * associated DMA channels.
2452 */
2453static void mport_cdev_terminate_dma(struct mport_dev *md)
2454{
2455#ifdef CONFIG_RAPIDIO_DMA_ENGINE
2456 struct mport_cdev_priv *client;
2457
2458 rmcd_debug(DMA, "%s", dev_name(&md->dev));
2459
2460 mutex_lock(&md->file_mutex);
2461 list_for_each_entry(client, &md->file_list, list) {
2462 if (client->dmach) {
2463 dmaengine_terminate_all(client->dmach);
2464 rio_release_dma(client->dmach);
2465 }
2466 }
2467 mutex_unlock(&md->file_mutex);
2468
2469 if (md->dma_chan) {
2470 dmaengine_terminate_all(md->dma_chan);
2471 rio_release_dma(md->dma_chan);
2472 md->dma_chan = NULL;
2473 }
2474#endif
2475}
2476
2477
2478/*
2479 * mport_cdev_kill_fasync() - Send SIGIO signal to all processes with open
2480 * mport_cdev files.
2481 */
2482static int mport_cdev_kill_fasync(struct mport_dev *md)
2483{
2484 unsigned int files = 0;
2485 struct mport_cdev_priv *client;
2486
2487 mutex_lock(&md->file_mutex);
2488 list_for_each_entry(client, &md->file_list, list) {
2489 if (client->async_queue)
2490 kill_fasync(&client->async_queue, SIGIO, POLL_HUP);
2491 files++;
2492 }
2493 mutex_unlock(&md->file_mutex);
2494 return files;
2495}
2496
2497/*
2498 * mport_cdev_remove() - Remove mport character device
2499 * @dev: Mport device to remove
2500 */
2501static void mport_cdev_remove(struct mport_dev *md)
2502{
2503 struct rio_mport_mapping *map, *_map;
2504
2505 rmcd_debug(EXIT, "Remove %s cdev", md->mport->name);
2506 atomic_set(&md->active, 0);
2507 mport_cdev_terminate_dma(md);
2508 rio_del_mport_pw_handler(md->mport, md, rio_mport_pw_handler);
2509 cdev_device_del(&md->cdev, &md->dev);
2510 mport_cdev_kill_fasync(md);
2511
2512 /* TODO: do we need to give clients some time to close file
2513 * descriptors? Simple wait for XX, or kref?
2514 */
2515
2516 /*
2517 * Release DMA buffers allocated for the mport device.
2518 * Disable associated inbound Rapidio requests mapping if applicable.
2519 */
2520 mutex_lock(&md->buf_mutex);
2521 list_for_each_entry_safe(map, _map, &md->mappings, node) {
2522 kref_put(&map->ref, mport_release_mapping);
2523 }
2524 mutex_unlock(&md->buf_mutex);
2525
2526 if (!list_empty(&md->mappings))
2527 rmcd_warn("WARNING: %s pending mappings on removal",
2528 md->mport->name);
2529
2530 rio_release_inb_dbell(md->mport, 0, 0x0fff);
2531
2532 put_device(&md->dev);
2533}
2534
2535/*
2536 * RIO rio_mport_interface driver
2537 */
2538
2539/*
2540 * mport_add_mport() - Add rio_mport from LDM device struct
2541 * @dev: Linux device model struct
2542 */
2543static int mport_add_mport(struct device *dev)
2544{
2545 struct rio_mport *mport = NULL;
2546 struct mport_dev *chdev = NULL;
2547
2548 mport = to_rio_mport(dev);
2549 if (!mport)
2550 return -ENODEV;
2551
2552 chdev = mport_cdev_add(mport);
2553 if (!chdev)
2554 return -ENODEV;
2555
2556 return 0;
2557}
2558
2559/*
2560 * mport_remove_mport() - Remove rio_mport from global list
2561 * TODO remove device from global mport_dev list
2562 */
2563static void mport_remove_mport(struct device *dev)
2564{
2565 struct rio_mport *mport = NULL;
2566 struct mport_dev *chdev;
2567 int found = 0;
2568
2569 mport = to_rio_mport(dev);
2570 rmcd_debug(EXIT, "Remove %s", mport->name);
2571
2572 mutex_lock(&mport_devs_lock);
2573 list_for_each_entry(chdev, &mport_devs, node) {
2574 if (chdev->mport->id == mport->id) {
2575 atomic_set(&chdev->active, 0);
2576 list_del(&chdev->node);
2577 found = 1;
2578 break;
2579 }
2580 }
2581 mutex_unlock(&mport_devs_lock);
2582
2583 if (found)
2584 mport_cdev_remove(chdev);
2585}
2586
2587/* the rio_mport_interface is used to handle local mport devices */
2588static struct class_interface rio_mport_interface __refdata = {
2589 .class = &rio_mport_class,
2590 .add_dev = mport_add_mport,
2591 .remove_dev = mport_remove_mport,
2592};
2593
2594/*
2595 * Linux kernel module
2596 */
2597
2598/*
2599 * mport_init - Driver module loading
2600 */
2601static int __init mport_init(void)
2602{
2603 int ret;
2604
2605 /* Create device class needed by udev */
2606 ret = class_register(&dev_class);
2607 if (ret) {
2608 rmcd_error("Unable to create " DRV_NAME " class");
2609 return ret;
2610 }
2611
2612 ret = alloc_chrdev_region(&dev_number, 0, RIO_MAX_MPORTS, DRV_NAME);
2613 if (ret < 0)
2614 goto err_chr;
2615
2616 rmcd_debug(INIT, "Registered class with major=%d", MAJOR(dev_number));
2617
2618 /* Register to rio_mport_interface */
2619 ret = class_interface_register(&rio_mport_interface);
2620 if (ret) {
2621 rmcd_error("class_interface_register() failed, err=%d", ret);
2622 goto err_cli;
2623 }
2624
2625 return 0;
2626
2627err_cli:
2628 unregister_chrdev_region(dev_number, RIO_MAX_MPORTS);
2629err_chr:
2630 class_unregister(&dev_class);
2631 return ret;
2632}
2633
2634/**
2635 * mport_exit - Driver module unloading
2636 */
2637static void __exit mport_exit(void)
2638{
2639 class_interface_unregister(&rio_mport_interface);
2640 class_unregister(&dev_class);
2641 unregister_chrdev_region(dev_number, RIO_MAX_MPORTS);
2642}
2643
2644module_init(mport_init);
2645module_exit(mport_exit);