Loading...
1// SPDX-License-Identifier: GPL-2.0
2// LPC interface for ChromeOS Embedded Controller
3//
4// Copyright (C) 2012-2015 Google, Inc
5//
6// This driver uses the ChromeOS EC byte-level message-based protocol for
7// communicating the keyboard state (which keys are pressed) from a keyboard EC
8// to the AP over some bus (such as i2c, lpc, spi). The EC does debouncing,
9// but everything else (including deghosting) is done here. The main
10// motivation for this is to keep the EC firmware as simple as possible, since
11// it cannot be easily upgraded and EC flash/IRAM space is relatively
12// expensive.
13
14#include <linux/acpi.h>
15#include <linux/dmi.h>
16#include <linux/delay.h>
17#include <linux/io.h>
18#include <linux/interrupt.h>
19#include <linux/module.h>
20#include <linux/platform_data/cros_ec_commands.h>
21#include <linux/platform_data/cros_ec_proto.h>
22#include <linux/platform_device.h>
23#include <linux/printk.h>
24#include <linux/suspend.h>
25
26#include "cros_ec.h"
27#include "cros_ec_lpc_mec.h"
28
29#define DRV_NAME "cros_ec_lpcs"
30#define ACPI_DRV_NAME "GOOG0004"
31
32/* True if ACPI device is present */
33static bool cros_ec_lpc_acpi_device_found;
34
35/**
36 * struct lpc_driver_ops - LPC driver operations
37 * @read: Copy length bytes from EC address offset into buffer dest. Returns
38 * the 8-bit checksum of all bytes read.
39 * @write: Copy length bytes from buffer msg into EC address offset. Returns
40 * the 8-bit checksum of all bytes written.
41 */
42struct lpc_driver_ops {
43 u8 (*read)(unsigned int offset, unsigned int length, u8 *dest);
44 u8 (*write)(unsigned int offset, unsigned int length, const u8 *msg);
45};
46
47static struct lpc_driver_ops cros_ec_lpc_ops = { };
48
49/*
50 * A generic instance of the read function of struct lpc_driver_ops, used for
51 * the LPC EC.
52 */
53static u8 cros_ec_lpc_read_bytes(unsigned int offset, unsigned int length,
54 u8 *dest)
55{
56 int sum = 0;
57 int i;
58
59 for (i = 0; i < length; ++i) {
60 dest[i] = inb(offset + i);
61 sum += dest[i];
62 }
63
64 /* Return checksum of all bytes read */
65 return sum;
66}
67
68/*
69 * A generic instance of the write function of struct lpc_driver_ops, used for
70 * the LPC EC.
71 */
72static u8 cros_ec_lpc_write_bytes(unsigned int offset, unsigned int length,
73 const u8 *msg)
74{
75 int sum = 0;
76 int i;
77
78 for (i = 0; i < length; ++i) {
79 outb(msg[i], offset + i);
80 sum += msg[i];
81 }
82
83 /* Return checksum of all bytes written */
84 return sum;
85}
86
87/*
88 * An instance of the read function of struct lpc_driver_ops, used for the
89 * MEC variant of LPC EC.
90 */
91static u8 cros_ec_lpc_mec_read_bytes(unsigned int offset, unsigned int length,
92 u8 *dest)
93{
94 int in_range = cros_ec_lpc_mec_in_range(offset, length);
95
96 if (in_range < 0)
97 return 0;
98
99 return in_range ?
100 cros_ec_lpc_io_bytes_mec(MEC_IO_READ,
101 offset - EC_HOST_CMD_REGION0,
102 length, dest) :
103 cros_ec_lpc_read_bytes(offset, length, dest);
104}
105
106/*
107 * An instance of the write function of struct lpc_driver_ops, used for the
108 * MEC variant of LPC EC.
109 */
110static u8 cros_ec_lpc_mec_write_bytes(unsigned int offset, unsigned int length,
111 const u8 *msg)
112{
113 int in_range = cros_ec_lpc_mec_in_range(offset, length);
114
115 if (in_range < 0)
116 return 0;
117
118 return in_range ?
119 cros_ec_lpc_io_bytes_mec(MEC_IO_WRITE,
120 offset - EC_HOST_CMD_REGION0,
121 length, (u8 *)msg) :
122 cros_ec_lpc_write_bytes(offset, length, msg);
123}
124
125static int ec_response_timed_out(void)
126{
127 unsigned long one_second = jiffies + HZ;
128 u8 data;
129
130 usleep_range(200, 300);
131 do {
132 if (!(cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_CMD, 1, &data) &
133 EC_LPC_STATUS_BUSY_MASK))
134 return 0;
135 usleep_range(100, 200);
136 } while (time_before(jiffies, one_second));
137
138 return 1;
139}
140
141static int cros_ec_pkt_xfer_lpc(struct cros_ec_device *ec,
142 struct cros_ec_command *msg)
143{
144 struct ec_host_response response;
145 u8 sum;
146 int ret = 0;
147 u8 *dout;
148
149 ret = cros_ec_prepare_tx(ec, msg);
150 if (ret < 0)
151 goto done;
152
153 /* Write buffer */
154 cros_ec_lpc_ops.write(EC_LPC_ADDR_HOST_PACKET, ret, ec->dout);
155
156 /* Here we go */
157 sum = EC_COMMAND_PROTOCOL_3;
158 cros_ec_lpc_ops.write(EC_LPC_ADDR_HOST_CMD, 1, &sum);
159
160 if (ec_response_timed_out()) {
161 dev_warn(ec->dev, "EC response timed out\n");
162 ret = -EIO;
163 goto done;
164 }
165
166 /* Check result */
167 msg->result = cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_DATA, 1, &sum);
168 ret = cros_ec_check_result(ec, msg);
169 if (ret)
170 goto done;
171
172 /* Read back response */
173 dout = (u8 *)&response;
174 sum = cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_PACKET, sizeof(response),
175 dout);
176
177 msg->result = response.result;
178
179 if (response.data_len > msg->insize) {
180 dev_err(ec->dev,
181 "packet too long (%d bytes, expected %d)",
182 response.data_len, msg->insize);
183 ret = -EMSGSIZE;
184 goto done;
185 }
186
187 /* Read response and process checksum */
188 sum += cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_PACKET +
189 sizeof(response), response.data_len,
190 msg->data);
191
192 if (sum) {
193 dev_err(ec->dev,
194 "bad packet checksum %02x\n",
195 response.checksum);
196 ret = -EBADMSG;
197 goto done;
198 }
199
200 /* Return actual amount of data received */
201 ret = response.data_len;
202done:
203 return ret;
204}
205
206static int cros_ec_cmd_xfer_lpc(struct cros_ec_device *ec,
207 struct cros_ec_command *msg)
208{
209 struct ec_lpc_host_args args;
210 u8 sum;
211 int ret = 0;
212
213 if (msg->outsize > EC_PROTO2_MAX_PARAM_SIZE ||
214 msg->insize > EC_PROTO2_MAX_PARAM_SIZE) {
215 dev_err(ec->dev,
216 "invalid buffer sizes (out %d, in %d)\n",
217 msg->outsize, msg->insize);
218 return -EINVAL;
219 }
220
221 /* Now actually send the command to the EC and get the result */
222 args.flags = EC_HOST_ARGS_FLAG_FROM_HOST;
223 args.command_version = msg->version;
224 args.data_size = msg->outsize;
225
226 /* Initialize checksum */
227 sum = msg->command + args.flags + args.command_version + args.data_size;
228
229 /* Copy data and update checksum */
230 sum += cros_ec_lpc_ops.write(EC_LPC_ADDR_HOST_PARAM, msg->outsize,
231 msg->data);
232
233 /* Finalize checksum and write args */
234 args.checksum = sum;
235 cros_ec_lpc_ops.write(EC_LPC_ADDR_HOST_ARGS, sizeof(args),
236 (u8 *)&args);
237
238 /* Here we go */
239 sum = msg->command;
240 cros_ec_lpc_ops.write(EC_LPC_ADDR_HOST_CMD, 1, &sum);
241
242 if (ec_response_timed_out()) {
243 dev_warn(ec->dev, "EC response timed out\n");
244 ret = -EIO;
245 goto done;
246 }
247
248 /* Check result */
249 msg->result = cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_DATA, 1, &sum);
250 ret = cros_ec_check_result(ec, msg);
251 if (ret)
252 goto done;
253
254 /* Read back args */
255 cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_ARGS, sizeof(args), (u8 *)&args);
256
257 if (args.data_size > msg->insize) {
258 dev_err(ec->dev,
259 "packet too long (%d bytes, expected %d)",
260 args.data_size, msg->insize);
261 ret = -ENOSPC;
262 goto done;
263 }
264
265 /* Start calculating response checksum */
266 sum = msg->command + args.flags + args.command_version + args.data_size;
267
268 /* Read response and update checksum */
269 sum += cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_PARAM, args.data_size,
270 msg->data);
271
272 /* Verify checksum */
273 if (args.checksum != sum) {
274 dev_err(ec->dev,
275 "bad packet checksum, expected %02x, got %02x\n",
276 args.checksum, sum);
277 ret = -EBADMSG;
278 goto done;
279 }
280
281 /* Return actual amount of data received */
282 ret = args.data_size;
283done:
284 return ret;
285}
286
287/* Returns num bytes read, or negative on error. Doesn't need locking. */
288static int cros_ec_lpc_readmem(struct cros_ec_device *ec, unsigned int offset,
289 unsigned int bytes, void *dest)
290{
291 int i = offset;
292 char *s = dest;
293 int cnt = 0;
294
295 if (offset >= EC_MEMMAP_SIZE - bytes)
296 return -EINVAL;
297
298 /* fixed length */
299 if (bytes) {
300 cros_ec_lpc_ops.read(EC_LPC_ADDR_MEMMAP + offset, bytes, s);
301 return bytes;
302 }
303
304 /* string */
305 for (; i < EC_MEMMAP_SIZE; i++, s++) {
306 cros_ec_lpc_ops.read(EC_LPC_ADDR_MEMMAP + i, 1, s);
307 cnt++;
308 if (!*s)
309 break;
310 }
311
312 return cnt;
313}
314
315static void cros_ec_lpc_acpi_notify(acpi_handle device, u32 value, void *data)
316{
317 struct cros_ec_device *ec_dev = data;
318 bool ec_has_more_events;
319 int ret;
320
321 ec_dev->last_event_time = cros_ec_get_time_ns();
322
323 if (ec_dev->mkbp_event_supported)
324 do {
325 ret = cros_ec_get_next_event(ec_dev, NULL,
326 &ec_has_more_events);
327 if (ret > 0)
328 blocking_notifier_call_chain(
329 &ec_dev->event_notifier, 0,
330 ec_dev);
331 } while (ec_has_more_events);
332
333 if (value == ACPI_NOTIFY_DEVICE_WAKE)
334 pm_system_wakeup();
335}
336
337static int cros_ec_lpc_probe(struct platform_device *pdev)
338{
339 struct device *dev = &pdev->dev;
340 struct acpi_device *adev;
341 acpi_status status;
342 struct cros_ec_device *ec_dev;
343 u8 buf[2];
344 int irq, ret;
345
346 /*
347 * The Framework Laptop (and possibly other non-ChromeOS devices)
348 * only exposes the eight I/O ports that are required for the Microchip EC.
349 * Requesting a larger reservation will fail.
350 */
351 if (!devm_request_region(dev, EC_HOST_CMD_REGION0,
352 EC_HOST_CMD_MEC_REGION_SIZE, dev_name(dev))) {
353 dev_err(dev, "couldn't reserve MEC region\n");
354 return -EBUSY;
355 }
356
357 cros_ec_lpc_mec_init(EC_HOST_CMD_REGION0,
358 EC_LPC_ADDR_MEMMAP + EC_MEMMAP_SIZE);
359
360 /*
361 * Read the mapped ID twice, the first one is assuming the
362 * EC is a Microchip Embedded Controller (MEC) variant, if the
363 * protocol fails, fallback to the non MEC variant and try to
364 * read again the ID.
365 */
366 cros_ec_lpc_ops.read = cros_ec_lpc_mec_read_bytes;
367 cros_ec_lpc_ops.write = cros_ec_lpc_mec_write_bytes;
368 cros_ec_lpc_ops.read(EC_LPC_ADDR_MEMMAP + EC_MEMMAP_ID, 2, buf);
369 if (buf[0] != 'E' || buf[1] != 'C') {
370 if (!devm_request_region(dev, EC_LPC_ADDR_MEMMAP, EC_MEMMAP_SIZE,
371 dev_name(dev))) {
372 dev_err(dev, "couldn't reserve memmap region\n");
373 return -EBUSY;
374 }
375
376 /* Re-assign read/write operations for the non MEC variant */
377 cros_ec_lpc_ops.read = cros_ec_lpc_read_bytes;
378 cros_ec_lpc_ops.write = cros_ec_lpc_write_bytes;
379 cros_ec_lpc_ops.read(EC_LPC_ADDR_MEMMAP + EC_MEMMAP_ID, 2,
380 buf);
381 if (buf[0] != 'E' || buf[1] != 'C') {
382 dev_err(dev, "EC ID not detected\n");
383 return -ENODEV;
384 }
385
386 /* Reserve the remaining I/O ports required by the non-MEC protocol. */
387 if (!devm_request_region(dev, EC_HOST_CMD_REGION0 + EC_HOST_CMD_MEC_REGION_SIZE,
388 EC_HOST_CMD_REGION_SIZE - EC_HOST_CMD_MEC_REGION_SIZE,
389 dev_name(dev))) {
390 dev_err(dev, "couldn't reserve remainder of region0\n");
391 return -EBUSY;
392 }
393 if (!devm_request_region(dev, EC_HOST_CMD_REGION1,
394 EC_HOST_CMD_REGION_SIZE, dev_name(dev))) {
395 dev_err(dev, "couldn't reserve region1\n");
396 return -EBUSY;
397 }
398 }
399
400 ec_dev = devm_kzalloc(dev, sizeof(*ec_dev), GFP_KERNEL);
401 if (!ec_dev)
402 return -ENOMEM;
403
404 platform_set_drvdata(pdev, ec_dev);
405 ec_dev->dev = dev;
406 ec_dev->phys_name = dev_name(dev);
407 ec_dev->cmd_xfer = cros_ec_cmd_xfer_lpc;
408 ec_dev->pkt_xfer = cros_ec_pkt_xfer_lpc;
409 ec_dev->cmd_readmem = cros_ec_lpc_readmem;
410 ec_dev->din_size = sizeof(struct ec_host_response) +
411 sizeof(struct ec_response_get_protocol_info);
412 ec_dev->dout_size = sizeof(struct ec_host_request);
413
414 /*
415 * Some boards do not have an IRQ allotted for cros_ec_lpc,
416 * which makes ENXIO an expected (and safe) scenario.
417 */
418 irq = platform_get_irq_optional(pdev, 0);
419 if (irq > 0)
420 ec_dev->irq = irq;
421 else if (irq != -ENXIO) {
422 dev_err(dev, "couldn't retrieve IRQ number (%d)\n", irq);
423 return irq;
424 }
425
426 ret = cros_ec_register(ec_dev);
427 if (ret) {
428 dev_err(dev, "couldn't register ec_dev (%d)\n", ret);
429 return ret;
430 }
431
432 /*
433 * Connect a notify handler to process MKBP messages if we have a
434 * companion ACPI device.
435 */
436 adev = ACPI_COMPANION(dev);
437 if (adev) {
438 status = acpi_install_notify_handler(adev->handle,
439 ACPI_ALL_NOTIFY,
440 cros_ec_lpc_acpi_notify,
441 ec_dev);
442 if (ACPI_FAILURE(status))
443 dev_warn(dev, "Failed to register notifier %08x\n",
444 status);
445 }
446
447 return 0;
448}
449
450static int cros_ec_lpc_remove(struct platform_device *pdev)
451{
452 struct cros_ec_device *ec_dev = platform_get_drvdata(pdev);
453 struct acpi_device *adev;
454
455 adev = ACPI_COMPANION(&pdev->dev);
456 if (adev)
457 acpi_remove_notify_handler(adev->handle, ACPI_ALL_NOTIFY,
458 cros_ec_lpc_acpi_notify);
459
460 cros_ec_unregister(ec_dev);
461
462 return 0;
463}
464
465static const struct acpi_device_id cros_ec_lpc_acpi_device_ids[] = {
466 { ACPI_DRV_NAME, 0 },
467 { }
468};
469MODULE_DEVICE_TABLE(acpi, cros_ec_lpc_acpi_device_ids);
470
471static const struct dmi_system_id cros_ec_lpc_dmi_table[] __initconst = {
472 {
473 /*
474 * Today all Chromebooks/boxes ship with Google_* as version and
475 * coreboot as bios vendor. No other systems with this
476 * combination are known to date.
477 */
478 .matches = {
479 DMI_MATCH(DMI_BIOS_VENDOR, "coreboot"),
480 DMI_MATCH(DMI_BIOS_VERSION, "Google_"),
481 },
482 },
483 {
484 /*
485 * If the box is running custom coreboot firmware then the
486 * DMI BIOS version string will not be matched by "Google_",
487 * but the system vendor string will still be matched by
488 * "GOOGLE".
489 */
490 .matches = {
491 DMI_MATCH(DMI_BIOS_VENDOR, "coreboot"),
492 DMI_MATCH(DMI_SYS_VENDOR, "GOOGLE"),
493 },
494 },
495 {
496 /* x86-link, the Chromebook Pixel. */
497 .matches = {
498 DMI_MATCH(DMI_SYS_VENDOR, "GOOGLE"),
499 DMI_MATCH(DMI_PRODUCT_NAME, "Link"),
500 },
501 },
502 {
503 /* x86-samus, the Chromebook Pixel 2. */
504 .matches = {
505 DMI_MATCH(DMI_SYS_VENDOR, "GOOGLE"),
506 DMI_MATCH(DMI_PRODUCT_NAME, "Samus"),
507 },
508 },
509 {
510 /* x86-peppy, the Acer C720 Chromebook. */
511 .matches = {
512 DMI_MATCH(DMI_SYS_VENDOR, "Acer"),
513 DMI_MATCH(DMI_PRODUCT_NAME, "Peppy"),
514 },
515 },
516 {
517 /* x86-glimmer, the Lenovo Thinkpad Yoga 11e. */
518 .matches = {
519 DMI_MATCH(DMI_SYS_VENDOR, "GOOGLE"),
520 DMI_MATCH(DMI_PRODUCT_NAME, "Glimmer"),
521 },
522 },
523 /* A small number of non-Chromebook/box machines also use the ChromeOS EC */
524 {
525 /* the Framework Laptop */
526 .matches = {
527 DMI_MATCH(DMI_SYS_VENDOR, "Framework"),
528 DMI_MATCH(DMI_PRODUCT_NAME, "Laptop"),
529 },
530 },
531 { /* sentinel */ }
532};
533MODULE_DEVICE_TABLE(dmi, cros_ec_lpc_dmi_table);
534
535#ifdef CONFIG_PM_SLEEP
536static int cros_ec_lpc_suspend(struct device *dev)
537{
538 struct cros_ec_device *ec_dev = dev_get_drvdata(dev);
539
540 return cros_ec_suspend(ec_dev);
541}
542
543static int cros_ec_lpc_resume(struct device *dev)
544{
545 struct cros_ec_device *ec_dev = dev_get_drvdata(dev);
546
547 return cros_ec_resume(ec_dev);
548}
549#endif
550
551static const struct dev_pm_ops cros_ec_lpc_pm_ops = {
552 SET_LATE_SYSTEM_SLEEP_PM_OPS(cros_ec_lpc_suspend, cros_ec_lpc_resume)
553};
554
555static struct platform_driver cros_ec_lpc_driver = {
556 .driver = {
557 .name = DRV_NAME,
558 .acpi_match_table = cros_ec_lpc_acpi_device_ids,
559 .pm = &cros_ec_lpc_pm_ops,
560 /*
561 * ACPI child devices may probe before us, and they racily
562 * check our drvdata pointer. Force synchronous probe until
563 * those races are resolved.
564 */
565 .probe_type = PROBE_FORCE_SYNCHRONOUS,
566 },
567 .probe = cros_ec_lpc_probe,
568 .remove = cros_ec_lpc_remove,
569};
570
571static struct platform_device cros_ec_lpc_device = {
572 .name = DRV_NAME
573};
574
575static acpi_status cros_ec_lpc_parse_device(acpi_handle handle, u32 level,
576 void *context, void **retval)
577{
578 *(bool *)context = true;
579 return AE_CTRL_TERMINATE;
580}
581
582static int __init cros_ec_lpc_init(void)
583{
584 int ret;
585 acpi_status status;
586
587 status = acpi_get_devices(ACPI_DRV_NAME, cros_ec_lpc_parse_device,
588 &cros_ec_lpc_acpi_device_found, NULL);
589 if (ACPI_FAILURE(status))
590 pr_warn(DRV_NAME ": Looking for %s failed\n", ACPI_DRV_NAME);
591
592 if (!cros_ec_lpc_acpi_device_found &&
593 !dmi_check_system(cros_ec_lpc_dmi_table)) {
594 pr_err(DRV_NAME ": unsupported system.\n");
595 return -ENODEV;
596 }
597
598 /* Register the driver */
599 ret = platform_driver_register(&cros_ec_lpc_driver);
600 if (ret) {
601 pr_err(DRV_NAME ": can't register driver: %d\n", ret);
602 return ret;
603 }
604
605 if (!cros_ec_lpc_acpi_device_found) {
606 /* Register the device, and it'll get hooked up automatically */
607 ret = platform_device_register(&cros_ec_lpc_device);
608 if (ret) {
609 pr_err(DRV_NAME ": can't register device: %d\n", ret);
610 platform_driver_unregister(&cros_ec_lpc_driver);
611 }
612 }
613
614 return ret;
615}
616
617static void __exit cros_ec_lpc_exit(void)
618{
619 if (!cros_ec_lpc_acpi_device_found)
620 platform_device_unregister(&cros_ec_lpc_device);
621 platform_driver_unregister(&cros_ec_lpc_driver);
622}
623
624module_init(cros_ec_lpc_init);
625module_exit(cros_ec_lpc_exit);
626
627MODULE_LICENSE("GPL");
628MODULE_DESCRIPTION("ChromeOS EC LPC driver");
1// SPDX-License-Identifier: GPL-2.0
2// LPC interface for ChromeOS Embedded Controller
3//
4// Copyright (C) 2012-2015 Google, Inc
5//
6// This driver uses the ChromeOS EC byte-level message-based protocol for
7// communicating the keyboard state (which keys are pressed) from a keyboard EC
8// to the AP over some bus (such as i2c, lpc, spi). The EC does debouncing,
9// but everything else (including deghosting) is done here. The main
10// motivation for this is to keep the EC firmware as simple as possible, since
11// it cannot be easily upgraded and EC flash/IRAM space is relatively
12// expensive.
13
14#include <linux/acpi.h>
15#include <linux/dmi.h>
16#include <linux/delay.h>
17#include <linux/io.h>
18#include <linux/interrupt.h>
19#include <linux/kobject.h>
20#include <linux/module.h>
21#include <linux/platform_data/cros_ec_commands.h>
22#include <linux/platform_data/cros_ec_proto.h>
23#include <linux/platform_device.h>
24#include <linux/printk.h>
25#include <linux/reboot.h>
26#include <linux/suspend.h>
27
28#include "cros_ec.h"
29#include "cros_ec_lpc_mec.h"
30
31#define DRV_NAME "cros_ec_lpcs"
32#define ACPI_DRV_NAME "GOOG0004"
33
34/* True if ACPI device is present */
35static bool cros_ec_lpc_acpi_device_found;
36
37/**
38 * struct lpc_driver_ops - LPC driver operations
39 * @read: Copy length bytes from EC address offset into buffer dest. Returns
40 * the 8-bit checksum of all bytes read.
41 * @write: Copy length bytes from buffer msg into EC address offset. Returns
42 * the 8-bit checksum of all bytes written.
43 */
44struct lpc_driver_ops {
45 u8 (*read)(unsigned int offset, unsigned int length, u8 *dest);
46 u8 (*write)(unsigned int offset, unsigned int length, const u8 *msg);
47};
48
49static struct lpc_driver_ops cros_ec_lpc_ops = { };
50
51/*
52 * A generic instance of the read function of struct lpc_driver_ops, used for
53 * the LPC EC.
54 */
55static u8 cros_ec_lpc_read_bytes(unsigned int offset, unsigned int length,
56 u8 *dest)
57{
58 int sum = 0;
59 int i;
60
61 for (i = 0; i < length; ++i) {
62 dest[i] = inb(offset + i);
63 sum += dest[i];
64 }
65
66 /* Return checksum of all bytes read */
67 return sum;
68}
69
70/*
71 * A generic instance of the write function of struct lpc_driver_ops, used for
72 * the LPC EC.
73 */
74static u8 cros_ec_lpc_write_bytes(unsigned int offset, unsigned int length,
75 const u8 *msg)
76{
77 int sum = 0;
78 int i;
79
80 for (i = 0; i < length; ++i) {
81 outb(msg[i], offset + i);
82 sum += msg[i];
83 }
84
85 /* Return checksum of all bytes written */
86 return sum;
87}
88
89/*
90 * An instance of the read function of struct lpc_driver_ops, used for the
91 * MEC variant of LPC EC.
92 */
93static u8 cros_ec_lpc_mec_read_bytes(unsigned int offset, unsigned int length,
94 u8 *dest)
95{
96 int in_range = cros_ec_lpc_mec_in_range(offset, length);
97
98 if (in_range < 0)
99 return 0;
100
101 return in_range ?
102 cros_ec_lpc_io_bytes_mec(MEC_IO_READ,
103 offset - EC_HOST_CMD_REGION0,
104 length, dest) :
105 cros_ec_lpc_read_bytes(offset, length, dest);
106}
107
108/*
109 * An instance of the write function of struct lpc_driver_ops, used for the
110 * MEC variant of LPC EC.
111 */
112static u8 cros_ec_lpc_mec_write_bytes(unsigned int offset, unsigned int length,
113 const u8 *msg)
114{
115 int in_range = cros_ec_lpc_mec_in_range(offset, length);
116
117 if (in_range < 0)
118 return 0;
119
120 return in_range ?
121 cros_ec_lpc_io_bytes_mec(MEC_IO_WRITE,
122 offset - EC_HOST_CMD_REGION0,
123 length, (u8 *)msg) :
124 cros_ec_lpc_write_bytes(offset, length, msg);
125}
126
127static int ec_response_timed_out(void)
128{
129 unsigned long one_second = jiffies + HZ;
130 u8 data;
131
132 usleep_range(200, 300);
133 do {
134 if (!(cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_CMD, 1, &data) &
135 EC_LPC_STATUS_BUSY_MASK))
136 return 0;
137 usleep_range(100, 200);
138 } while (time_before(jiffies, one_second));
139
140 return 1;
141}
142
143static int cros_ec_pkt_xfer_lpc(struct cros_ec_device *ec,
144 struct cros_ec_command *msg)
145{
146 struct ec_host_response response;
147 u8 sum;
148 int ret = 0;
149 u8 *dout;
150
151 ret = cros_ec_prepare_tx(ec, msg);
152 if (ret < 0)
153 goto done;
154
155 /* Write buffer */
156 cros_ec_lpc_ops.write(EC_LPC_ADDR_HOST_PACKET, ret, ec->dout);
157
158 /* Here we go */
159 sum = EC_COMMAND_PROTOCOL_3;
160 cros_ec_lpc_ops.write(EC_LPC_ADDR_HOST_CMD, 1, &sum);
161
162 if (ec_response_timed_out()) {
163 dev_warn(ec->dev, "EC response timed out\n");
164 ret = -EIO;
165 goto done;
166 }
167
168 /* Check result */
169 msg->result = cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_DATA, 1, &sum);
170 ret = cros_ec_check_result(ec, msg);
171 if (ret)
172 goto done;
173
174 /* Read back response */
175 dout = (u8 *)&response;
176 sum = cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_PACKET, sizeof(response),
177 dout);
178
179 msg->result = response.result;
180
181 if (response.data_len > msg->insize) {
182 dev_err(ec->dev,
183 "packet too long (%d bytes, expected %d)",
184 response.data_len, msg->insize);
185 ret = -EMSGSIZE;
186 goto done;
187 }
188
189 /* Read response and process checksum */
190 sum += cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_PACKET +
191 sizeof(response), response.data_len,
192 msg->data);
193
194 if (sum) {
195 dev_err(ec->dev,
196 "bad packet checksum %02x\n",
197 response.checksum);
198 ret = -EBADMSG;
199 goto done;
200 }
201
202 /* Return actual amount of data received */
203 ret = response.data_len;
204done:
205 return ret;
206}
207
208static int cros_ec_cmd_xfer_lpc(struct cros_ec_device *ec,
209 struct cros_ec_command *msg)
210{
211 struct ec_lpc_host_args args;
212 u8 sum;
213 int ret = 0;
214
215 if (msg->outsize > EC_PROTO2_MAX_PARAM_SIZE ||
216 msg->insize > EC_PROTO2_MAX_PARAM_SIZE) {
217 dev_err(ec->dev,
218 "invalid buffer sizes (out %d, in %d)\n",
219 msg->outsize, msg->insize);
220 return -EINVAL;
221 }
222
223 /* Now actually send the command to the EC and get the result */
224 args.flags = EC_HOST_ARGS_FLAG_FROM_HOST;
225 args.command_version = msg->version;
226 args.data_size = msg->outsize;
227
228 /* Initialize checksum */
229 sum = msg->command + args.flags + args.command_version + args.data_size;
230
231 /* Copy data and update checksum */
232 sum += cros_ec_lpc_ops.write(EC_LPC_ADDR_HOST_PARAM, msg->outsize,
233 msg->data);
234
235 /* Finalize checksum and write args */
236 args.checksum = sum;
237 cros_ec_lpc_ops.write(EC_LPC_ADDR_HOST_ARGS, sizeof(args),
238 (u8 *)&args);
239
240 /* Here we go */
241 sum = msg->command;
242 cros_ec_lpc_ops.write(EC_LPC_ADDR_HOST_CMD, 1, &sum);
243
244 if (ec_response_timed_out()) {
245 dev_warn(ec->dev, "EC response timed out\n");
246 ret = -EIO;
247 goto done;
248 }
249
250 /* Check result */
251 msg->result = cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_DATA, 1, &sum);
252 ret = cros_ec_check_result(ec, msg);
253 if (ret)
254 goto done;
255
256 /* Read back args */
257 cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_ARGS, sizeof(args), (u8 *)&args);
258
259 if (args.data_size > msg->insize) {
260 dev_err(ec->dev,
261 "packet too long (%d bytes, expected %d)",
262 args.data_size, msg->insize);
263 ret = -ENOSPC;
264 goto done;
265 }
266
267 /* Start calculating response checksum */
268 sum = msg->command + args.flags + args.command_version + args.data_size;
269
270 /* Read response and update checksum */
271 sum += cros_ec_lpc_ops.read(EC_LPC_ADDR_HOST_PARAM, args.data_size,
272 msg->data);
273
274 /* Verify checksum */
275 if (args.checksum != sum) {
276 dev_err(ec->dev,
277 "bad packet checksum, expected %02x, got %02x\n",
278 args.checksum, sum);
279 ret = -EBADMSG;
280 goto done;
281 }
282
283 /* Return actual amount of data received */
284 ret = args.data_size;
285done:
286 return ret;
287}
288
289/* Returns num bytes read, or negative on error. Doesn't need locking. */
290static int cros_ec_lpc_readmem(struct cros_ec_device *ec, unsigned int offset,
291 unsigned int bytes, void *dest)
292{
293 int i = offset;
294 char *s = dest;
295 int cnt = 0;
296
297 if (offset >= EC_MEMMAP_SIZE - bytes)
298 return -EINVAL;
299
300 /* fixed length */
301 if (bytes) {
302 cros_ec_lpc_ops.read(EC_LPC_ADDR_MEMMAP + offset, bytes, s);
303 return bytes;
304 }
305
306 /* string */
307 for (; i < EC_MEMMAP_SIZE; i++, s++) {
308 cros_ec_lpc_ops.read(EC_LPC_ADDR_MEMMAP + i, 1, s);
309 cnt++;
310 if (!*s)
311 break;
312 }
313
314 return cnt;
315}
316
317static void cros_ec_lpc_acpi_notify(acpi_handle device, u32 value, void *data)
318{
319 static const char *env[] = { "ERROR=PANIC", NULL };
320 struct cros_ec_device *ec_dev = data;
321 bool ec_has_more_events;
322 int ret;
323
324 ec_dev->last_event_time = cros_ec_get_time_ns();
325
326 if (value == ACPI_NOTIFY_CROS_EC_PANIC) {
327 dev_emerg(ec_dev->dev, "CrOS EC Panic Reported. Shutdown is imminent!");
328 blocking_notifier_call_chain(&ec_dev->panic_notifier, 0, ec_dev);
329 kobject_uevent_env(&ec_dev->dev->kobj, KOBJ_CHANGE, (char **)env);
330 /* Begin orderly shutdown. EC will force reset after a short period. */
331 hw_protection_shutdown("CrOS EC Panic", -1);
332 /* Do not query for other events after a panic is reported */
333 return;
334 }
335
336 if (ec_dev->mkbp_event_supported)
337 do {
338 ret = cros_ec_get_next_event(ec_dev, NULL,
339 &ec_has_more_events);
340 if (ret > 0)
341 blocking_notifier_call_chain(
342 &ec_dev->event_notifier, 0,
343 ec_dev);
344 } while (ec_has_more_events);
345
346 if (value == ACPI_NOTIFY_DEVICE_WAKE)
347 pm_system_wakeup();
348}
349
350static int cros_ec_lpc_probe(struct platform_device *pdev)
351{
352 struct device *dev = &pdev->dev;
353 struct acpi_device *adev;
354 acpi_status status;
355 struct cros_ec_device *ec_dev;
356 u8 buf[2] = {};
357 int irq, ret;
358
359 /*
360 * The Framework Laptop (and possibly other non-ChromeOS devices)
361 * only exposes the eight I/O ports that are required for the Microchip EC.
362 * Requesting a larger reservation will fail.
363 */
364 if (!devm_request_region(dev, EC_HOST_CMD_REGION0,
365 EC_HOST_CMD_MEC_REGION_SIZE, dev_name(dev))) {
366 dev_err(dev, "couldn't reserve MEC region\n");
367 return -EBUSY;
368 }
369
370 cros_ec_lpc_mec_init(EC_HOST_CMD_REGION0,
371 EC_LPC_ADDR_MEMMAP + EC_MEMMAP_SIZE);
372
373 /*
374 * Read the mapped ID twice, the first one is assuming the
375 * EC is a Microchip Embedded Controller (MEC) variant, if the
376 * protocol fails, fallback to the non MEC variant and try to
377 * read again the ID.
378 */
379 cros_ec_lpc_ops.read = cros_ec_lpc_mec_read_bytes;
380 cros_ec_lpc_ops.write = cros_ec_lpc_mec_write_bytes;
381 cros_ec_lpc_ops.read(EC_LPC_ADDR_MEMMAP + EC_MEMMAP_ID, 2, buf);
382 if (buf[0] != 'E' || buf[1] != 'C') {
383 if (!devm_request_region(dev, EC_LPC_ADDR_MEMMAP, EC_MEMMAP_SIZE,
384 dev_name(dev))) {
385 dev_err(dev, "couldn't reserve memmap region\n");
386 return -EBUSY;
387 }
388
389 /* Re-assign read/write operations for the non MEC variant */
390 cros_ec_lpc_ops.read = cros_ec_lpc_read_bytes;
391 cros_ec_lpc_ops.write = cros_ec_lpc_write_bytes;
392 cros_ec_lpc_ops.read(EC_LPC_ADDR_MEMMAP + EC_MEMMAP_ID, 2,
393 buf);
394 if (buf[0] != 'E' || buf[1] != 'C') {
395 dev_err(dev, "EC ID not detected\n");
396 return -ENODEV;
397 }
398
399 /* Reserve the remaining I/O ports required by the non-MEC protocol. */
400 if (!devm_request_region(dev, EC_HOST_CMD_REGION0 + EC_HOST_CMD_MEC_REGION_SIZE,
401 EC_HOST_CMD_REGION_SIZE - EC_HOST_CMD_MEC_REGION_SIZE,
402 dev_name(dev))) {
403 dev_err(dev, "couldn't reserve remainder of region0\n");
404 return -EBUSY;
405 }
406 if (!devm_request_region(dev, EC_HOST_CMD_REGION1,
407 EC_HOST_CMD_REGION_SIZE, dev_name(dev))) {
408 dev_err(dev, "couldn't reserve region1\n");
409 return -EBUSY;
410 }
411 }
412
413 ec_dev = devm_kzalloc(dev, sizeof(*ec_dev), GFP_KERNEL);
414 if (!ec_dev)
415 return -ENOMEM;
416
417 platform_set_drvdata(pdev, ec_dev);
418 ec_dev->dev = dev;
419 ec_dev->phys_name = dev_name(dev);
420 ec_dev->cmd_xfer = cros_ec_cmd_xfer_lpc;
421 ec_dev->pkt_xfer = cros_ec_pkt_xfer_lpc;
422 ec_dev->cmd_readmem = cros_ec_lpc_readmem;
423 ec_dev->din_size = sizeof(struct ec_host_response) +
424 sizeof(struct ec_response_get_protocol_info);
425 ec_dev->dout_size = sizeof(struct ec_host_request);
426
427 /*
428 * Some boards do not have an IRQ allotted for cros_ec_lpc,
429 * which makes ENXIO an expected (and safe) scenario.
430 */
431 irq = platform_get_irq_optional(pdev, 0);
432 if (irq > 0)
433 ec_dev->irq = irq;
434 else if (irq != -ENXIO) {
435 dev_err(dev, "couldn't retrieve IRQ number (%d)\n", irq);
436 return irq;
437 }
438
439 ret = cros_ec_register(ec_dev);
440 if (ret) {
441 dev_err(dev, "couldn't register ec_dev (%d)\n", ret);
442 return ret;
443 }
444
445 /*
446 * Connect a notify handler to process MKBP messages if we have a
447 * companion ACPI device.
448 */
449 adev = ACPI_COMPANION(dev);
450 if (adev) {
451 status = acpi_install_notify_handler(adev->handle,
452 ACPI_ALL_NOTIFY,
453 cros_ec_lpc_acpi_notify,
454 ec_dev);
455 if (ACPI_FAILURE(status))
456 dev_warn(dev, "Failed to register notifier %08x\n",
457 status);
458 }
459
460 return 0;
461}
462
463static void cros_ec_lpc_remove(struct platform_device *pdev)
464{
465 struct cros_ec_device *ec_dev = platform_get_drvdata(pdev);
466 struct acpi_device *adev;
467
468 adev = ACPI_COMPANION(&pdev->dev);
469 if (adev)
470 acpi_remove_notify_handler(adev->handle, ACPI_ALL_NOTIFY,
471 cros_ec_lpc_acpi_notify);
472
473 cros_ec_unregister(ec_dev);
474}
475
476static const struct acpi_device_id cros_ec_lpc_acpi_device_ids[] = {
477 { ACPI_DRV_NAME, 0 },
478 { }
479};
480MODULE_DEVICE_TABLE(acpi, cros_ec_lpc_acpi_device_ids);
481
482static const struct dmi_system_id cros_ec_lpc_dmi_table[] __initconst = {
483 {
484 /*
485 * Today all Chromebooks/boxes ship with Google_* as version and
486 * coreboot as bios vendor. No other systems with this
487 * combination are known to date.
488 */
489 .matches = {
490 DMI_MATCH(DMI_BIOS_VENDOR, "coreboot"),
491 DMI_MATCH(DMI_BIOS_VERSION, "Google_"),
492 },
493 },
494 {
495 /*
496 * If the box is running custom coreboot firmware then the
497 * DMI BIOS version string will not be matched by "Google_",
498 * but the system vendor string will still be matched by
499 * "GOOGLE".
500 */
501 .matches = {
502 DMI_MATCH(DMI_BIOS_VENDOR, "coreboot"),
503 DMI_MATCH(DMI_SYS_VENDOR, "GOOGLE"),
504 },
505 },
506 {
507 /* x86-link, the Chromebook Pixel. */
508 .matches = {
509 DMI_MATCH(DMI_SYS_VENDOR, "GOOGLE"),
510 DMI_MATCH(DMI_PRODUCT_NAME, "Link"),
511 },
512 },
513 {
514 /* x86-samus, the Chromebook Pixel 2. */
515 .matches = {
516 DMI_MATCH(DMI_SYS_VENDOR, "GOOGLE"),
517 DMI_MATCH(DMI_PRODUCT_NAME, "Samus"),
518 },
519 },
520 {
521 /* x86-peppy, the Acer C720 Chromebook. */
522 .matches = {
523 DMI_MATCH(DMI_SYS_VENDOR, "Acer"),
524 DMI_MATCH(DMI_PRODUCT_NAME, "Peppy"),
525 },
526 },
527 {
528 /* x86-glimmer, the Lenovo Thinkpad Yoga 11e. */
529 .matches = {
530 DMI_MATCH(DMI_SYS_VENDOR, "GOOGLE"),
531 DMI_MATCH(DMI_PRODUCT_NAME, "Glimmer"),
532 },
533 },
534 /* A small number of non-Chromebook/box machines also use the ChromeOS EC */
535 {
536 /* the Framework Laptop */
537 .matches = {
538 DMI_MATCH(DMI_SYS_VENDOR, "Framework"),
539 DMI_MATCH(DMI_PRODUCT_NAME, "Laptop"),
540 },
541 },
542 { /* sentinel */ }
543};
544MODULE_DEVICE_TABLE(dmi, cros_ec_lpc_dmi_table);
545
546#ifdef CONFIG_PM_SLEEP
547static int cros_ec_lpc_prepare(struct device *dev)
548{
549 struct cros_ec_device *ec_dev = dev_get_drvdata(dev);
550 return cros_ec_suspend_prepare(ec_dev);
551}
552
553static void cros_ec_lpc_complete(struct device *dev)
554{
555 struct cros_ec_device *ec_dev = dev_get_drvdata(dev);
556 cros_ec_resume_complete(ec_dev);
557}
558
559static int cros_ec_lpc_suspend_late(struct device *dev)
560{
561 struct cros_ec_device *ec_dev = dev_get_drvdata(dev);
562
563 return cros_ec_suspend_late(ec_dev);
564}
565
566static int cros_ec_lpc_resume_early(struct device *dev)
567{
568 struct cros_ec_device *ec_dev = dev_get_drvdata(dev);
569
570 return cros_ec_resume_early(ec_dev);
571}
572#endif
573
574static const struct dev_pm_ops cros_ec_lpc_pm_ops = {
575#ifdef CONFIG_PM_SLEEP
576 .prepare = cros_ec_lpc_prepare,
577 .complete = cros_ec_lpc_complete,
578#endif
579 SET_LATE_SYSTEM_SLEEP_PM_OPS(cros_ec_lpc_suspend_late, cros_ec_lpc_resume_early)
580};
581
582static struct platform_driver cros_ec_lpc_driver = {
583 .driver = {
584 .name = DRV_NAME,
585 .acpi_match_table = cros_ec_lpc_acpi_device_ids,
586 .pm = &cros_ec_lpc_pm_ops,
587 /*
588 * ACPI child devices may probe before us, and they racily
589 * check our drvdata pointer. Force synchronous probe until
590 * those races are resolved.
591 */
592 .probe_type = PROBE_FORCE_SYNCHRONOUS,
593 },
594 .probe = cros_ec_lpc_probe,
595 .remove_new = cros_ec_lpc_remove,
596};
597
598static struct platform_device cros_ec_lpc_device = {
599 .name = DRV_NAME
600};
601
602static acpi_status cros_ec_lpc_parse_device(acpi_handle handle, u32 level,
603 void *context, void **retval)
604{
605 *(bool *)context = true;
606 return AE_CTRL_TERMINATE;
607}
608
609static int __init cros_ec_lpc_init(void)
610{
611 int ret;
612 acpi_status status;
613
614 status = acpi_get_devices(ACPI_DRV_NAME, cros_ec_lpc_parse_device,
615 &cros_ec_lpc_acpi_device_found, NULL);
616 if (ACPI_FAILURE(status))
617 pr_warn(DRV_NAME ": Looking for %s failed\n", ACPI_DRV_NAME);
618
619 if (!cros_ec_lpc_acpi_device_found &&
620 !dmi_check_system(cros_ec_lpc_dmi_table)) {
621 pr_err(DRV_NAME ": unsupported system.\n");
622 return -ENODEV;
623 }
624
625 /* Register the driver */
626 ret = platform_driver_register(&cros_ec_lpc_driver);
627 if (ret) {
628 pr_err(DRV_NAME ": can't register driver: %d\n", ret);
629 return ret;
630 }
631
632 if (!cros_ec_lpc_acpi_device_found) {
633 /* Register the device, and it'll get hooked up automatically */
634 ret = platform_device_register(&cros_ec_lpc_device);
635 if (ret) {
636 pr_err(DRV_NAME ": can't register device: %d\n", ret);
637 platform_driver_unregister(&cros_ec_lpc_driver);
638 }
639 }
640
641 return ret;
642}
643
644static void __exit cros_ec_lpc_exit(void)
645{
646 if (!cros_ec_lpc_acpi_device_found)
647 platform_device_unregister(&cros_ec_lpc_device);
648 platform_driver_unregister(&cros_ec_lpc_driver);
649}
650
651module_init(cros_ec_lpc_init);
652module_exit(cros_ec_lpc_exit);
653
654MODULE_LICENSE("GPL");
655MODULE_DESCRIPTION("ChromeOS EC LPC driver");