Loading...
1// SPDX-License-Identifier: GPL-2.0
2// ChromeOS EC communication protocol helper functions
3//
4// Copyright (C) 2015 Google, Inc
5
6#include <linux/delay.h>
7#include <linux/device.h>
8#include <linux/module.h>
9#include <linux/platform_data/cros_ec_commands.h>
10#include <linux/platform_data/cros_ec_proto.h>
11#include <linux/slab.h>
12#include <asm/unaligned.h>
13
14#include "cros_ec_trace.h"
15
16#define EC_COMMAND_RETRIES 50
17
18static const int cros_ec_error_map[] = {
19 [EC_RES_INVALID_COMMAND] = -EOPNOTSUPP,
20 [EC_RES_ERROR] = -EIO,
21 [EC_RES_INVALID_PARAM] = -EINVAL,
22 [EC_RES_ACCESS_DENIED] = -EACCES,
23 [EC_RES_INVALID_RESPONSE] = -EPROTO,
24 [EC_RES_INVALID_VERSION] = -ENOPROTOOPT,
25 [EC_RES_INVALID_CHECKSUM] = -EBADMSG,
26 [EC_RES_IN_PROGRESS] = -EINPROGRESS,
27 [EC_RES_UNAVAILABLE] = -ENODATA,
28 [EC_RES_TIMEOUT] = -ETIMEDOUT,
29 [EC_RES_OVERFLOW] = -EOVERFLOW,
30 [EC_RES_INVALID_HEADER] = -EBADR,
31 [EC_RES_REQUEST_TRUNCATED] = -EBADR,
32 [EC_RES_RESPONSE_TOO_BIG] = -EFBIG,
33 [EC_RES_BUS_ERROR] = -EFAULT,
34 [EC_RES_BUSY] = -EBUSY,
35 [EC_RES_INVALID_HEADER_VERSION] = -EBADMSG,
36 [EC_RES_INVALID_HEADER_CRC] = -EBADMSG,
37 [EC_RES_INVALID_DATA_CRC] = -EBADMSG,
38 [EC_RES_DUP_UNAVAILABLE] = -ENODATA,
39};
40
41static int cros_ec_map_error(uint32_t result)
42{
43 int ret = 0;
44
45 if (result != EC_RES_SUCCESS) {
46 if (result < ARRAY_SIZE(cros_ec_error_map) && cros_ec_error_map[result])
47 ret = cros_ec_error_map[result];
48 else
49 ret = -EPROTO;
50 }
51
52 return ret;
53}
54
55static int prepare_tx(struct cros_ec_device *ec_dev,
56 struct cros_ec_command *msg)
57{
58 struct ec_host_request *request;
59 u8 *out;
60 int i;
61 u8 csum = 0;
62
63 if (msg->outsize + sizeof(*request) > ec_dev->dout_size)
64 return -EINVAL;
65
66 out = ec_dev->dout;
67 request = (struct ec_host_request *)out;
68 request->struct_version = EC_HOST_REQUEST_VERSION;
69 request->checksum = 0;
70 request->command = msg->command;
71 request->command_version = msg->version;
72 request->reserved = 0;
73 request->data_len = msg->outsize;
74
75 for (i = 0; i < sizeof(*request); i++)
76 csum += out[i];
77
78 /* Copy data and update checksum */
79 memcpy(out + sizeof(*request), msg->data, msg->outsize);
80 for (i = 0; i < msg->outsize; i++)
81 csum += msg->data[i];
82
83 request->checksum = -csum;
84
85 return sizeof(*request) + msg->outsize;
86}
87
88static int prepare_tx_legacy(struct cros_ec_device *ec_dev,
89 struct cros_ec_command *msg)
90{
91 u8 *out;
92 u8 csum;
93 int i;
94
95 if (msg->outsize > EC_PROTO2_MAX_PARAM_SIZE)
96 return -EINVAL;
97
98 out = ec_dev->dout;
99 out[0] = EC_CMD_VERSION0 + msg->version;
100 out[1] = msg->command;
101 out[2] = msg->outsize;
102 csum = out[0] + out[1] + out[2];
103 for (i = 0; i < msg->outsize; i++)
104 csum += out[EC_MSG_TX_HEADER_BYTES + i] = msg->data[i];
105 out[EC_MSG_TX_HEADER_BYTES + msg->outsize] = csum;
106
107 return EC_MSG_TX_PROTO_BYTES + msg->outsize;
108}
109
110static int cros_ec_xfer_command(struct cros_ec_device *ec_dev, struct cros_ec_command *msg)
111{
112 int ret;
113 int (*xfer_fxn)(struct cros_ec_device *ec, struct cros_ec_command *msg);
114
115 if (ec_dev->proto_version > 2)
116 xfer_fxn = ec_dev->pkt_xfer;
117 else
118 xfer_fxn = ec_dev->cmd_xfer;
119
120 if (!xfer_fxn) {
121 /*
122 * This error can happen if a communication error happened and
123 * the EC is trying to use protocol v2, on an underlying
124 * communication mechanism that does not support v2.
125 */
126 dev_err_once(ec_dev->dev, "missing EC transfer API, cannot send command\n");
127 return -EIO;
128 }
129
130 trace_cros_ec_request_start(msg);
131 ret = (*xfer_fxn)(ec_dev, msg);
132 trace_cros_ec_request_done(msg, ret);
133
134 return ret;
135}
136
137static int cros_ec_wait_until_complete(struct cros_ec_device *ec_dev, uint32_t *result)
138{
139 struct {
140 struct cros_ec_command msg;
141 struct ec_response_get_comms_status status;
142 } __packed buf;
143 struct cros_ec_command *msg = &buf.msg;
144 struct ec_response_get_comms_status *status = &buf.status;
145 int ret = 0, i;
146
147 msg->version = 0;
148 msg->command = EC_CMD_GET_COMMS_STATUS;
149 msg->insize = sizeof(*status);
150 msg->outsize = 0;
151
152 /* Query the EC's status until it's no longer busy or we encounter an error. */
153 for (i = 0; i < EC_COMMAND_RETRIES; ++i) {
154 usleep_range(10000, 11000);
155
156 ret = cros_ec_xfer_command(ec_dev, msg);
157 if (ret == -EAGAIN)
158 continue;
159 if (ret < 0)
160 return ret;
161
162 *result = msg->result;
163 if (msg->result != EC_RES_SUCCESS)
164 return ret;
165
166 if (ret == 0) {
167 ret = -EPROTO;
168 break;
169 }
170
171 if (!(status->flags & EC_COMMS_STATUS_PROCESSING))
172 return ret;
173 }
174
175 if (i >= EC_COMMAND_RETRIES)
176 ret = -EAGAIN;
177
178 return ret;
179}
180
181static int cros_ec_send_command(struct cros_ec_device *ec_dev, struct cros_ec_command *msg)
182{
183 int ret = cros_ec_xfer_command(ec_dev, msg);
184
185 if (msg->result == EC_RES_IN_PROGRESS)
186 ret = cros_ec_wait_until_complete(ec_dev, &msg->result);
187
188 return ret;
189}
190
191/**
192 * cros_ec_prepare_tx() - Prepare an outgoing message in the output buffer.
193 * @ec_dev: Device to register.
194 * @msg: Message to write.
195 *
196 * This is used by all ChromeOS EC drivers to prepare the outgoing message
197 * according to different protocol versions.
198 *
199 * Return: number of prepared bytes on success or negative error code.
200 */
201int cros_ec_prepare_tx(struct cros_ec_device *ec_dev,
202 struct cros_ec_command *msg)
203{
204 if (ec_dev->proto_version > 2)
205 return prepare_tx(ec_dev, msg);
206
207 return prepare_tx_legacy(ec_dev, msg);
208}
209EXPORT_SYMBOL(cros_ec_prepare_tx);
210
211/**
212 * cros_ec_check_result() - Check ec_msg->result.
213 * @ec_dev: EC device.
214 * @msg: Message to check.
215 *
216 * This is used by ChromeOS EC drivers to check the ec_msg->result for
217 * EC_RES_IN_PROGRESS and to warn about them.
218 *
219 * The function should not check for furthermore error codes. Otherwise,
220 * it would break the ABI.
221 *
222 * Return: -EAGAIN if ec_msg->result == EC_RES_IN_PROGRESS. Otherwise, 0.
223 */
224int cros_ec_check_result(struct cros_ec_device *ec_dev,
225 struct cros_ec_command *msg)
226{
227 switch (msg->result) {
228 case EC_RES_SUCCESS:
229 return 0;
230 case EC_RES_IN_PROGRESS:
231 dev_dbg(ec_dev->dev, "command 0x%02x in progress\n",
232 msg->command);
233 return -EAGAIN;
234 default:
235 dev_dbg(ec_dev->dev, "command 0x%02x returned %d\n",
236 msg->command, msg->result);
237 return 0;
238 }
239}
240EXPORT_SYMBOL(cros_ec_check_result);
241
242/*
243 * cros_ec_get_host_event_wake_mask
244 *
245 * Get the mask of host events that cause wake from suspend.
246 *
247 * @ec_dev: EC device to call
248 * @msg: message structure to use
249 * @mask: result when function returns 0.
250 *
251 * LOCKING:
252 * the caller has ec_dev->lock mutex, or the caller knows there is
253 * no other command in progress.
254 */
255static int cros_ec_get_host_event_wake_mask(struct cros_ec_device *ec_dev, uint32_t *mask)
256{
257 struct cros_ec_command *msg;
258 struct ec_response_host_event_mask *r;
259 int ret, mapped;
260
261 msg = kzalloc(sizeof(*msg) + sizeof(*r), GFP_KERNEL);
262 if (!msg)
263 return -ENOMEM;
264
265 msg->command = EC_CMD_HOST_EVENT_GET_WAKE_MASK;
266 msg->insize = sizeof(*r);
267
268 ret = cros_ec_send_command(ec_dev, msg);
269 if (ret < 0)
270 goto exit;
271
272 mapped = cros_ec_map_error(msg->result);
273 if (mapped) {
274 ret = mapped;
275 goto exit;
276 }
277
278 if (ret == 0) {
279 ret = -EPROTO;
280 goto exit;
281 }
282
283 r = (struct ec_response_host_event_mask *)msg->data;
284 *mask = r->mask;
285 ret = 0;
286exit:
287 kfree(msg);
288 return ret;
289}
290
291static int cros_ec_get_proto_info(struct cros_ec_device *ec_dev, int devidx)
292{
293 struct cros_ec_command *msg;
294 struct ec_response_get_protocol_info *info;
295 int ret, mapped;
296
297 ec_dev->proto_version = 3;
298 if (devidx > 0)
299 ec_dev->max_passthru = 0;
300
301 msg = kzalloc(sizeof(*msg) + sizeof(*info), GFP_KERNEL);
302 if (!msg)
303 return -ENOMEM;
304
305 msg->command = EC_CMD_PASSTHRU_OFFSET(devidx) | EC_CMD_GET_PROTOCOL_INFO;
306 msg->insize = sizeof(*info);
307
308 ret = cros_ec_send_command(ec_dev, msg);
309 /*
310 * Send command once again when timeout occurred.
311 * Fingerprint MCU (FPMCU) is restarted during system boot which
312 * introduces small window in which FPMCU won't respond for any
313 * messages sent by kernel. There is no need to wait before next
314 * attempt because we waited at least EC_MSG_DEADLINE_MS.
315 */
316 if (ret == -ETIMEDOUT)
317 ret = cros_ec_send_command(ec_dev, msg);
318
319 if (ret < 0) {
320 dev_dbg(ec_dev->dev,
321 "failed to check for EC[%d] protocol version: %d\n",
322 devidx, ret);
323 goto exit;
324 }
325
326 mapped = cros_ec_map_error(msg->result);
327 if (mapped) {
328 ret = mapped;
329 goto exit;
330 }
331
332 if (ret == 0) {
333 ret = -EPROTO;
334 goto exit;
335 }
336
337 info = (struct ec_response_get_protocol_info *)msg->data;
338
339 switch (devidx) {
340 case CROS_EC_DEV_EC_INDEX:
341 ec_dev->max_request = info->max_request_packet_size -
342 sizeof(struct ec_host_request);
343 ec_dev->max_response = info->max_response_packet_size -
344 sizeof(struct ec_host_response);
345 ec_dev->proto_version = min(EC_HOST_REQUEST_VERSION,
346 fls(info->protocol_versions) - 1);
347 ec_dev->din_size = info->max_response_packet_size + EC_MAX_RESPONSE_OVERHEAD;
348 ec_dev->dout_size = info->max_request_packet_size + EC_MAX_REQUEST_OVERHEAD;
349
350 dev_dbg(ec_dev->dev, "using proto v%u\n", ec_dev->proto_version);
351 break;
352 case CROS_EC_DEV_PD_INDEX:
353 ec_dev->max_passthru = info->max_request_packet_size -
354 sizeof(struct ec_host_request);
355
356 dev_dbg(ec_dev->dev, "found PD chip\n");
357 break;
358 default:
359 dev_dbg(ec_dev->dev, "unknown passthru index: %d\n", devidx);
360 break;
361 }
362
363 ret = 0;
364exit:
365 kfree(msg);
366 return ret;
367}
368
369static int cros_ec_get_proto_info_legacy(struct cros_ec_device *ec_dev)
370{
371 struct cros_ec_command *msg;
372 struct ec_params_hello *params;
373 struct ec_response_hello *response;
374 int ret, mapped;
375
376 ec_dev->proto_version = 2;
377
378 msg = kzalloc(sizeof(*msg) + max(sizeof(*params), sizeof(*response)), GFP_KERNEL);
379 if (!msg)
380 return -ENOMEM;
381
382 msg->command = EC_CMD_HELLO;
383 msg->insize = sizeof(*response);
384 msg->outsize = sizeof(*params);
385
386 params = (struct ec_params_hello *)msg->data;
387 params->in_data = 0xa0b0c0d0;
388
389 ret = cros_ec_send_command(ec_dev, msg);
390 if (ret < 0) {
391 dev_dbg(ec_dev->dev, "EC failed to respond to v2 hello: %d\n", ret);
392 goto exit;
393 }
394
395 mapped = cros_ec_map_error(msg->result);
396 if (mapped) {
397 ret = mapped;
398 dev_err(ec_dev->dev, "EC responded to v2 hello with error: %d\n", msg->result);
399 goto exit;
400 }
401
402 if (ret == 0) {
403 ret = -EPROTO;
404 goto exit;
405 }
406
407 response = (struct ec_response_hello *)msg->data;
408 if (response->out_data != 0xa1b2c3d4) {
409 dev_err(ec_dev->dev,
410 "EC responded to v2 hello with bad result: %u\n",
411 response->out_data);
412 ret = -EBADMSG;
413 goto exit;
414 }
415
416 ec_dev->max_request = EC_PROTO2_MAX_PARAM_SIZE;
417 ec_dev->max_response = EC_PROTO2_MAX_PARAM_SIZE;
418 ec_dev->max_passthru = 0;
419 ec_dev->pkt_xfer = NULL;
420 ec_dev->din_size = EC_PROTO2_MSG_BYTES;
421 ec_dev->dout_size = EC_PROTO2_MSG_BYTES;
422
423 dev_dbg(ec_dev->dev, "falling back to proto v2\n");
424 ret = 0;
425exit:
426 kfree(msg);
427 return ret;
428}
429
430/*
431 * cros_ec_get_host_command_version_mask
432 *
433 * Get the version mask of a given command.
434 *
435 * @ec_dev: EC device to call
436 * @msg: message structure to use
437 * @cmd: command to get the version of.
438 * @mask: result when function returns 0.
439 *
440 * @return 0 on success, error code otherwise
441 *
442 * LOCKING:
443 * the caller has ec_dev->lock mutex or the caller knows there is
444 * no other command in progress.
445 */
446static int cros_ec_get_host_command_version_mask(struct cros_ec_device *ec_dev, u16 cmd, u32 *mask)
447{
448 struct ec_params_get_cmd_versions *pver;
449 struct ec_response_get_cmd_versions *rver;
450 struct cros_ec_command *msg;
451 int ret, mapped;
452
453 msg = kmalloc(sizeof(*msg) + max(sizeof(*rver), sizeof(*pver)),
454 GFP_KERNEL);
455 if (!msg)
456 return -ENOMEM;
457
458 msg->version = 0;
459 msg->command = EC_CMD_GET_CMD_VERSIONS;
460 msg->insize = sizeof(*rver);
461 msg->outsize = sizeof(*pver);
462
463 pver = (struct ec_params_get_cmd_versions *)msg->data;
464 pver->cmd = cmd;
465
466 ret = cros_ec_send_command(ec_dev, msg);
467 if (ret < 0)
468 goto exit;
469
470 mapped = cros_ec_map_error(msg->result);
471 if (mapped) {
472 ret = mapped;
473 goto exit;
474 }
475
476 if (ret == 0) {
477 ret = -EPROTO;
478 goto exit;
479 }
480
481 rver = (struct ec_response_get_cmd_versions *)msg->data;
482 *mask = rver->version_mask;
483 ret = 0;
484exit:
485 kfree(msg);
486 return ret;
487}
488
489/**
490 * cros_ec_query_all() - Query the protocol version supported by the
491 * ChromeOS EC.
492 * @ec_dev: Device to register.
493 *
494 * Return: 0 on success or negative error code.
495 */
496int cros_ec_query_all(struct cros_ec_device *ec_dev)
497{
498 struct device *dev = ec_dev->dev;
499 u32 ver_mask;
500 int ret;
501
502 /* First try sending with proto v3. */
503 if (!cros_ec_get_proto_info(ec_dev, CROS_EC_DEV_EC_INDEX)) {
504 /* Check for PD. */
505 cros_ec_get_proto_info(ec_dev, CROS_EC_DEV_PD_INDEX);
506 } else {
507 /* Try querying with a v2 hello message. */
508 ret = cros_ec_get_proto_info_legacy(ec_dev);
509 if (ret) {
510 /*
511 * It's possible for a test to occur too early when
512 * the EC isn't listening. If this happens, we'll
513 * test later when the first command is run.
514 */
515 ec_dev->proto_version = EC_PROTO_VERSION_UNKNOWN;
516 dev_dbg(ec_dev->dev, "EC query failed: %d\n", ret);
517 return ret;
518 }
519 }
520
521 devm_kfree(dev, ec_dev->din);
522 devm_kfree(dev, ec_dev->dout);
523
524 ec_dev->din = devm_kzalloc(dev, ec_dev->din_size, GFP_KERNEL);
525 if (!ec_dev->din) {
526 ret = -ENOMEM;
527 goto exit;
528 }
529
530 ec_dev->dout = devm_kzalloc(dev, ec_dev->dout_size, GFP_KERNEL);
531 if (!ec_dev->dout) {
532 devm_kfree(dev, ec_dev->din);
533 ret = -ENOMEM;
534 goto exit;
535 }
536
537 /* Probe if MKBP event is supported */
538 ret = cros_ec_get_host_command_version_mask(ec_dev, EC_CMD_GET_NEXT_EVENT, &ver_mask);
539 if (ret < 0 || ver_mask == 0) {
540 ec_dev->mkbp_event_supported = 0;
541 } else {
542 ec_dev->mkbp_event_supported = fls(ver_mask);
543
544 dev_dbg(ec_dev->dev, "MKBP support version %u\n", ec_dev->mkbp_event_supported - 1);
545 }
546
547 /* Probe if host sleep v1 is supported for S0ix failure detection. */
548 ret = cros_ec_get_host_command_version_mask(ec_dev, EC_CMD_HOST_SLEEP_EVENT, &ver_mask);
549 ec_dev->host_sleep_v1 = (ret == 0 && (ver_mask & EC_VER_MASK(1)));
550
551 /* Get host event wake mask. */
552 ret = cros_ec_get_host_event_wake_mask(ec_dev, &ec_dev->host_event_wake_mask);
553 if (ret < 0) {
554 /*
555 * If the EC doesn't support EC_CMD_HOST_EVENT_GET_WAKE_MASK,
556 * use a reasonable default. Note that we ignore various
557 * battery, AC status, and power-state events, because (a)
558 * those can be quite common (e.g., when sitting at full
559 * charge, on AC) and (b) these are not actionable wake events;
560 * if anything, we'd like to continue suspending (to save
561 * power), not wake up.
562 */
563 ec_dev->host_event_wake_mask = U32_MAX &
564 ~(EC_HOST_EVENT_MASK(EC_HOST_EVENT_LID_CLOSED) |
565 EC_HOST_EVENT_MASK(EC_HOST_EVENT_AC_DISCONNECTED) |
566 EC_HOST_EVENT_MASK(EC_HOST_EVENT_BATTERY_LOW) |
567 EC_HOST_EVENT_MASK(EC_HOST_EVENT_BATTERY_CRITICAL) |
568 EC_HOST_EVENT_MASK(EC_HOST_EVENT_BATTERY) |
569 EC_HOST_EVENT_MASK(EC_HOST_EVENT_PD_MCU) |
570 EC_HOST_EVENT_MASK(EC_HOST_EVENT_BATTERY_STATUS));
571 /*
572 * Old ECs may not support this command. Complain about all
573 * other errors.
574 */
575 if (ret != -EOPNOTSUPP)
576 dev_err(ec_dev->dev,
577 "failed to retrieve wake mask: %d\n", ret);
578 }
579
580 ret = 0;
581
582exit:
583 return ret;
584}
585EXPORT_SYMBOL(cros_ec_query_all);
586
587/**
588 * cros_ec_cmd_xfer() - Send a command to the ChromeOS EC.
589 * @ec_dev: EC device.
590 * @msg: Message to write.
591 *
592 * Call this to send a command to the ChromeOS EC. This should be used instead
593 * of calling the EC's cmd_xfer() callback directly. This function does not
594 * convert EC command execution error codes to Linux error codes. Most
595 * in-kernel users will want to use cros_ec_cmd_xfer_status() instead since
596 * that function implements the conversion.
597 *
598 * Return:
599 * >0 - EC command was executed successfully. The return value is the number
600 * of bytes returned by the EC (excluding the header).
601 * =0 - EC communication was successful. EC command execution results are
602 * reported in msg->result. The result will be EC_RES_SUCCESS if the
603 * command was executed successfully or report an EC command execution
604 * error.
605 * <0 - EC communication error. Return value is the Linux error code.
606 */
607int cros_ec_cmd_xfer(struct cros_ec_device *ec_dev, struct cros_ec_command *msg)
608{
609 int ret;
610
611 mutex_lock(&ec_dev->lock);
612 if (ec_dev->proto_version == EC_PROTO_VERSION_UNKNOWN) {
613 ret = cros_ec_query_all(ec_dev);
614 if (ret) {
615 dev_err(ec_dev->dev,
616 "EC version unknown and query failed; aborting command\n");
617 mutex_unlock(&ec_dev->lock);
618 return ret;
619 }
620 }
621
622 if (msg->insize > ec_dev->max_response) {
623 dev_dbg(ec_dev->dev, "clamping message receive buffer\n");
624 msg->insize = ec_dev->max_response;
625 }
626
627 if (msg->command < EC_CMD_PASSTHRU_OFFSET(CROS_EC_DEV_PD_INDEX)) {
628 if (msg->outsize > ec_dev->max_request) {
629 dev_err(ec_dev->dev,
630 "request of size %u is too big (max: %u)\n",
631 msg->outsize,
632 ec_dev->max_request);
633 mutex_unlock(&ec_dev->lock);
634 return -EMSGSIZE;
635 }
636 } else {
637 if (msg->outsize > ec_dev->max_passthru) {
638 dev_err(ec_dev->dev,
639 "passthru rq of size %u is too big (max: %u)\n",
640 msg->outsize,
641 ec_dev->max_passthru);
642 mutex_unlock(&ec_dev->lock);
643 return -EMSGSIZE;
644 }
645 }
646
647 ret = cros_ec_send_command(ec_dev, msg);
648 mutex_unlock(&ec_dev->lock);
649
650 return ret;
651}
652EXPORT_SYMBOL(cros_ec_cmd_xfer);
653
654/**
655 * cros_ec_cmd_xfer_status() - Send a command to the ChromeOS EC.
656 * @ec_dev: EC device.
657 * @msg: Message to write.
658 *
659 * Call this to send a command to the ChromeOS EC. This should be used instead of calling the EC's
660 * cmd_xfer() callback directly. It returns success status only if both the command was transmitted
661 * successfully and the EC replied with success status.
662 *
663 * Return:
664 * >=0 - The number of bytes transferred.
665 * <0 - Linux error code
666 */
667int cros_ec_cmd_xfer_status(struct cros_ec_device *ec_dev,
668 struct cros_ec_command *msg)
669{
670 int ret, mapped;
671
672 ret = cros_ec_cmd_xfer(ec_dev, msg);
673 if (ret < 0)
674 return ret;
675
676 mapped = cros_ec_map_error(msg->result);
677 if (mapped) {
678 dev_dbg(ec_dev->dev, "Command result (err: %d [%d])\n",
679 msg->result, mapped);
680 ret = mapped;
681 }
682
683 return ret;
684}
685EXPORT_SYMBOL(cros_ec_cmd_xfer_status);
686
687static int get_next_event_xfer(struct cros_ec_device *ec_dev,
688 struct cros_ec_command *msg,
689 struct ec_response_get_next_event_v1 *event,
690 int version, uint32_t size)
691{
692 int ret;
693
694 msg->version = version;
695 msg->command = EC_CMD_GET_NEXT_EVENT;
696 msg->insize = size;
697 msg->outsize = 0;
698
699 ret = cros_ec_cmd_xfer_status(ec_dev, msg);
700 if (ret > 0) {
701 ec_dev->event_size = ret - 1;
702 ec_dev->event_data = *event;
703 }
704
705 return ret;
706}
707
708static int get_next_event(struct cros_ec_device *ec_dev)
709{
710 struct {
711 struct cros_ec_command msg;
712 struct ec_response_get_next_event_v1 event;
713 } __packed buf;
714 struct cros_ec_command *msg = &buf.msg;
715 struct ec_response_get_next_event_v1 *event = &buf.event;
716 const int cmd_version = ec_dev->mkbp_event_supported - 1;
717
718 memset(msg, 0, sizeof(*msg));
719 if (ec_dev->suspended) {
720 dev_dbg(ec_dev->dev, "Device suspended.\n");
721 return -EHOSTDOWN;
722 }
723
724 if (cmd_version == 0)
725 return get_next_event_xfer(ec_dev, msg, event, 0,
726 sizeof(struct ec_response_get_next_event));
727
728 return get_next_event_xfer(ec_dev, msg, event, cmd_version,
729 sizeof(struct ec_response_get_next_event_v1));
730}
731
732static int get_keyboard_state_event(struct cros_ec_device *ec_dev)
733{
734 u8 buffer[sizeof(struct cros_ec_command) +
735 sizeof(ec_dev->event_data.data)];
736 struct cros_ec_command *msg = (struct cros_ec_command *)&buffer;
737
738 msg->version = 0;
739 msg->command = EC_CMD_MKBP_STATE;
740 msg->insize = sizeof(ec_dev->event_data.data);
741 msg->outsize = 0;
742
743 ec_dev->event_size = cros_ec_cmd_xfer_status(ec_dev, msg);
744 ec_dev->event_data.event_type = EC_MKBP_EVENT_KEY_MATRIX;
745 memcpy(&ec_dev->event_data.data, msg->data,
746 sizeof(ec_dev->event_data.data));
747
748 return ec_dev->event_size;
749}
750
751/**
752 * cros_ec_get_next_event() - Fetch next event from the ChromeOS EC.
753 * @ec_dev: Device to fetch event from.
754 * @wake_event: Pointer to a bool set to true upon return if the event might be
755 * treated as a wake event. Ignored if null.
756 * @has_more_events: Pointer to bool set to true if more than one event is
757 * pending.
758 * Some EC will set this flag to indicate cros_ec_get_next_event()
759 * can be called multiple times in a row.
760 * It is an optimization to prevent issuing a EC command for
761 * nothing or wait for another interrupt from the EC to process
762 * the next message.
763 * Ignored if null.
764 *
765 * Return: negative error code on errors; 0 for no data; or else number of
766 * bytes received (i.e., an event was retrieved successfully). Event types are
767 * written out to @ec_dev->event_data.event_type on success.
768 */
769int cros_ec_get_next_event(struct cros_ec_device *ec_dev,
770 bool *wake_event,
771 bool *has_more_events)
772{
773 u8 event_type;
774 u32 host_event;
775 int ret;
776 u32 ver_mask;
777
778 /*
779 * Default value for wake_event.
780 * Wake up on keyboard event, wake up for spurious interrupt or link
781 * error to the EC.
782 */
783 if (wake_event)
784 *wake_event = true;
785
786 /*
787 * Default value for has_more_events.
788 * EC will raise another interrupt if AP does not process all events
789 * anyway.
790 */
791 if (has_more_events)
792 *has_more_events = false;
793
794 if (!ec_dev->mkbp_event_supported)
795 return get_keyboard_state_event(ec_dev);
796
797 ret = get_next_event(ec_dev);
798 /*
799 * -ENOPROTOOPT is returned when EC returns EC_RES_INVALID_VERSION.
800 * This can occur when EC based device (e.g. Fingerprint MCU) jumps to
801 * the RO image which doesn't support newer version of the command. In
802 * this case we will attempt to update maximum supported version of the
803 * EC_CMD_GET_NEXT_EVENT.
804 */
805 if (ret == -ENOPROTOOPT) {
806 dev_dbg(ec_dev->dev,
807 "GET_NEXT_EVENT returned invalid version error.\n");
808 ret = cros_ec_get_host_command_version_mask(ec_dev,
809 EC_CMD_GET_NEXT_EVENT,
810 &ver_mask);
811 if (ret < 0 || ver_mask == 0)
812 /*
813 * Do not change the MKBP supported version if we can't
814 * obtain supported version correctly. Please note that
815 * calling EC_CMD_GET_NEXT_EVENT returned
816 * EC_RES_INVALID_VERSION which means that the command
817 * is present.
818 */
819 return -ENOPROTOOPT;
820
821 ec_dev->mkbp_event_supported = fls(ver_mask);
822 dev_dbg(ec_dev->dev, "MKBP support version changed to %u\n",
823 ec_dev->mkbp_event_supported - 1);
824
825 /* Try to get next event with new MKBP support version set. */
826 ret = get_next_event(ec_dev);
827 }
828
829 if (ret <= 0)
830 return ret;
831
832 if (has_more_events)
833 *has_more_events = ec_dev->event_data.event_type &
834 EC_MKBP_HAS_MORE_EVENTS;
835 ec_dev->event_data.event_type &= EC_MKBP_EVENT_TYPE_MASK;
836
837 if (wake_event) {
838 event_type = ec_dev->event_data.event_type;
839 host_event = cros_ec_get_host_event(ec_dev);
840
841 /*
842 * Sensor events need to be parsed by the sensor sub-device.
843 * Defer them, and don't report the wakeup here.
844 */
845 if (event_type == EC_MKBP_EVENT_SENSOR_FIFO) {
846 *wake_event = false;
847 } else if (host_event) {
848 /* rtc_update_irq() already handles wakeup events. */
849 if (host_event & EC_HOST_EVENT_MASK(EC_HOST_EVENT_RTC))
850 *wake_event = false;
851 /* Masked host-events should not count as wake events. */
852 if (!(host_event & ec_dev->host_event_wake_mask))
853 *wake_event = false;
854 }
855 }
856
857 return ret;
858}
859EXPORT_SYMBOL(cros_ec_get_next_event);
860
861/**
862 * cros_ec_get_host_event() - Return a mask of event set by the ChromeOS EC.
863 * @ec_dev: Device to fetch event from.
864 *
865 * When MKBP is supported, when the EC raises an interrupt, we collect the
866 * events raised and call the functions in the ec notifier. This function
867 * is a helper to know which events are raised.
868 *
869 * Return: 0 on error or non-zero bitmask of one or more EC_HOST_EVENT_*.
870 */
871u32 cros_ec_get_host_event(struct cros_ec_device *ec_dev)
872{
873 u32 host_event;
874
875 if (!ec_dev->mkbp_event_supported)
876 return 0;
877
878 if (ec_dev->event_data.event_type != EC_MKBP_EVENT_HOST_EVENT)
879 return 0;
880
881 if (ec_dev->event_size != sizeof(host_event)) {
882 dev_warn(ec_dev->dev, "Invalid host event size\n");
883 return 0;
884 }
885
886 host_event = get_unaligned_le32(&ec_dev->event_data.data.host_event);
887
888 return host_event;
889}
890EXPORT_SYMBOL(cros_ec_get_host_event);
891
892/**
893 * cros_ec_check_features() - Test for the presence of EC features
894 *
895 * @ec: EC device, does not have to be connected directly to the AP,
896 * can be daisy chained through another device.
897 * @feature: One of ec_feature_code bit.
898 *
899 * Call this function to test whether the ChromeOS EC supports a feature.
900 *
901 * Return: true if supported, false if not (or if an error was encountered).
902 */
903bool cros_ec_check_features(struct cros_ec_dev *ec, int feature)
904{
905 struct ec_response_get_features *features = &ec->features;
906 int ret;
907
908 if (features->flags[0] == -1U && features->flags[1] == -1U) {
909 /* features bitmap not read yet */
910 ret = cros_ec_cmd(ec->ec_dev, 0, EC_CMD_GET_FEATURES + ec->cmd_offset,
911 NULL, 0, features, sizeof(*features));
912 if (ret < 0) {
913 dev_warn(ec->dev, "cannot get EC features: %d\n", ret);
914 memset(features, 0, sizeof(*features));
915 }
916
917 dev_dbg(ec->dev, "EC features %08x %08x\n",
918 features->flags[0], features->flags[1]);
919 }
920
921 return !!(features->flags[feature / 32] & EC_FEATURE_MASK_0(feature));
922}
923EXPORT_SYMBOL_GPL(cros_ec_check_features);
924
925/**
926 * cros_ec_get_sensor_count() - Return the number of MEMS sensors supported.
927 *
928 * @ec: EC device, does not have to be connected directly to the AP,
929 * can be daisy chained through another device.
930 * Return: < 0 in case of error.
931 */
932int cros_ec_get_sensor_count(struct cros_ec_dev *ec)
933{
934 /*
935 * Issue a command to get the number of sensor reported.
936 * If not supported, check for legacy mode.
937 */
938 int ret, sensor_count;
939 struct ec_params_motion_sense *params;
940 struct ec_response_motion_sense *resp;
941 struct cros_ec_command *msg;
942 struct cros_ec_device *ec_dev = ec->ec_dev;
943 u8 status;
944
945 msg = kzalloc(sizeof(*msg) + max(sizeof(*params), sizeof(*resp)),
946 GFP_KERNEL);
947 if (!msg)
948 return -ENOMEM;
949
950 msg->version = 1;
951 msg->command = EC_CMD_MOTION_SENSE_CMD + ec->cmd_offset;
952 msg->outsize = sizeof(*params);
953 msg->insize = sizeof(*resp);
954
955 params = (struct ec_params_motion_sense *)msg->data;
956 params->cmd = MOTIONSENSE_CMD_DUMP;
957
958 ret = cros_ec_cmd_xfer_status(ec->ec_dev, msg);
959 if (ret < 0) {
960 sensor_count = ret;
961 } else {
962 resp = (struct ec_response_motion_sense *)msg->data;
963 sensor_count = resp->dump.sensor_count;
964 }
965 kfree(msg);
966
967 /*
968 * Check legacy mode: Let's find out if sensors are accessible
969 * via LPC interface.
970 */
971 if (sensor_count < 0 && ec->cmd_offset == 0 && ec_dev->cmd_readmem) {
972 ret = ec_dev->cmd_readmem(ec_dev, EC_MEMMAP_ACC_STATUS,
973 1, &status);
974 if (ret >= 0 &&
975 (status & EC_MEMMAP_ACC_STATUS_PRESENCE_BIT)) {
976 /*
977 * We have 2 sensors, one in the lid, one in the base.
978 */
979 sensor_count = 2;
980 } else {
981 /*
982 * EC uses LPC interface and no sensors are presented.
983 */
984 sensor_count = 0;
985 }
986 }
987 return sensor_count;
988}
989EXPORT_SYMBOL_GPL(cros_ec_get_sensor_count);
990
991/**
992 * cros_ec_cmd - Send a command to the EC.
993 *
994 * @ec_dev: EC device
995 * @version: EC command version
996 * @command: EC command
997 * @outdata: EC command output data
998 * @outsize: Size of outdata
999 * @indata: EC command input data
1000 * @insize: Size of indata
1001 *
1002 * Return: >= 0 on success, negative error number on failure.
1003 */
1004int cros_ec_cmd(struct cros_ec_device *ec_dev,
1005 unsigned int version,
1006 int command,
1007 const void *outdata,
1008 size_t outsize,
1009 void *indata,
1010 size_t insize)
1011{
1012 struct cros_ec_command *msg;
1013 int ret;
1014
1015 msg = kzalloc(sizeof(*msg) + max(insize, outsize), GFP_KERNEL);
1016 if (!msg)
1017 return -ENOMEM;
1018
1019 msg->version = version;
1020 msg->command = command;
1021 msg->outsize = outsize;
1022 msg->insize = insize;
1023
1024 if (outsize)
1025 memcpy(msg->data, outdata, outsize);
1026
1027 ret = cros_ec_cmd_xfer_status(ec_dev, msg);
1028 if (ret < 0)
1029 goto error;
1030
1031 if (insize)
1032 memcpy(indata, msg->data, insize);
1033error:
1034 kfree(msg);
1035 return ret;
1036}
1037EXPORT_SYMBOL_GPL(cros_ec_cmd);
1// SPDX-License-Identifier: GPL-2.0
2// ChromeOS EC communication protocol helper functions
3//
4// Copyright (C) 2015 Google, Inc
5
6#include <linux/delay.h>
7#include <linux/device.h>
8#include <linux/module.h>
9#include <linux/platform_data/cros_ec_commands.h>
10#include <linux/platform_data/cros_ec_proto.h>
11#include <linux/slab.h>
12#include <asm/unaligned.h>
13
14#include "cros_ec_trace.h"
15
16#define EC_COMMAND_RETRIES 50
17
18static int prepare_packet(struct cros_ec_device *ec_dev,
19 struct cros_ec_command *msg)
20{
21 struct ec_host_request *request;
22 u8 *out;
23 int i;
24 u8 csum = 0;
25
26 BUG_ON(ec_dev->proto_version != EC_HOST_REQUEST_VERSION);
27 BUG_ON(msg->outsize + sizeof(*request) > ec_dev->dout_size);
28
29 out = ec_dev->dout;
30 request = (struct ec_host_request *)out;
31 request->struct_version = EC_HOST_REQUEST_VERSION;
32 request->checksum = 0;
33 request->command = msg->command;
34 request->command_version = msg->version;
35 request->reserved = 0;
36 request->data_len = msg->outsize;
37
38 for (i = 0; i < sizeof(*request); i++)
39 csum += out[i];
40
41 /* Copy data and update checksum */
42 memcpy(out + sizeof(*request), msg->data, msg->outsize);
43 for (i = 0; i < msg->outsize; i++)
44 csum += msg->data[i];
45
46 request->checksum = -csum;
47
48 return sizeof(*request) + msg->outsize;
49}
50
51static int send_command(struct cros_ec_device *ec_dev,
52 struct cros_ec_command *msg)
53{
54 int ret;
55 int (*xfer_fxn)(struct cros_ec_device *ec, struct cros_ec_command *msg);
56
57 if (ec_dev->proto_version > 2)
58 xfer_fxn = ec_dev->pkt_xfer;
59 else
60 xfer_fxn = ec_dev->cmd_xfer;
61
62 if (!xfer_fxn) {
63 /*
64 * This error can happen if a communication error happened and
65 * the EC is trying to use protocol v2, on an underlying
66 * communication mechanism that does not support v2.
67 */
68 dev_err_once(ec_dev->dev,
69 "missing EC transfer API, cannot send command\n");
70 return -EIO;
71 }
72
73 trace_cros_ec_request_start(msg);
74 ret = (*xfer_fxn)(ec_dev, msg);
75 trace_cros_ec_request_done(msg, ret);
76 if (msg->result == EC_RES_IN_PROGRESS) {
77 int i;
78 struct cros_ec_command *status_msg;
79 struct ec_response_get_comms_status *status;
80
81 status_msg = kmalloc(sizeof(*status_msg) + sizeof(*status),
82 GFP_KERNEL);
83 if (!status_msg)
84 return -ENOMEM;
85
86 status_msg->version = 0;
87 status_msg->command = EC_CMD_GET_COMMS_STATUS;
88 status_msg->insize = sizeof(*status);
89 status_msg->outsize = 0;
90
91 /*
92 * Query the EC's status until it's no longer busy or
93 * we encounter an error.
94 */
95 for (i = 0; i < EC_COMMAND_RETRIES; i++) {
96 usleep_range(10000, 11000);
97
98 trace_cros_ec_request_start(status_msg);
99 ret = (*xfer_fxn)(ec_dev, status_msg);
100 trace_cros_ec_request_done(status_msg, ret);
101 if (ret == -EAGAIN)
102 continue;
103 if (ret < 0)
104 break;
105
106 msg->result = status_msg->result;
107 if (status_msg->result != EC_RES_SUCCESS)
108 break;
109
110 status = (struct ec_response_get_comms_status *)
111 status_msg->data;
112 if (!(status->flags & EC_COMMS_STATUS_PROCESSING))
113 break;
114 }
115
116 kfree(status_msg);
117 }
118
119 return ret;
120}
121
122/**
123 * cros_ec_prepare_tx() - Prepare an outgoing message in the output buffer.
124 * @ec_dev: Device to register.
125 * @msg: Message to write.
126 *
127 * This is intended to be used by all ChromeOS EC drivers, but at present
128 * only SPI uses it. Once LPC uses the same protocol it can start using it.
129 * I2C could use it now, with a refactor of the existing code.
130 *
131 * Return: 0 on success or negative error code.
132 */
133int cros_ec_prepare_tx(struct cros_ec_device *ec_dev,
134 struct cros_ec_command *msg)
135{
136 u8 *out;
137 u8 csum;
138 int i;
139
140 if (ec_dev->proto_version > 2)
141 return prepare_packet(ec_dev, msg);
142
143 BUG_ON(msg->outsize > EC_PROTO2_MAX_PARAM_SIZE);
144 out = ec_dev->dout;
145 out[0] = EC_CMD_VERSION0 + msg->version;
146 out[1] = msg->command;
147 out[2] = msg->outsize;
148 csum = out[0] + out[1] + out[2];
149 for (i = 0; i < msg->outsize; i++)
150 csum += out[EC_MSG_TX_HEADER_BYTES + i] = msg->data[i];
151 out[EC_MSG_TX_HEADER_BYTES + msg->outsize] = csum;
152
153 return EC_MSG_TX_PROTO_BYTES + msg->outsize;
154}
155EXPORT_SYMBOL(cros_ec_prepare_tx);
156
157/**
158 * cros_ec_check_result() - Check ec_msg->result.
159 * @ec_dev: EC device.
160 * @msg: Message to check.
161 *
162 * This is used by ChromeOS EC drivers to check the ec_msg->result for
163 * errors and to warn about them.
164 *
165 * Return: 0 on success or negative error code.
166 */
167int cros_ec_check_result(struct cros_ec_device *ec_dev,
168 struct cros_ec_command *msg)
169{
170 switch (msg->result) {
171 case EC_RES_SUCCESS:
172 return 0;
173 case EC_RES_IN_PROGRESS:
174 dev_dbg(ec_dev->dev, "command 0x%02x in progress\n",
175 msg->command);
176 return -EAGAIN;
177 default:
178 dev_dbg(ec_dev->dev, "command 0x%02x returned %d\n",
179 msg->command, msg->result);
180 return 0;
181 }
182}
183EXPORT_SYMBOL(cros_ec_check_result);
184
185/*
186 * cros_ec_get_host_event_wake_mask
187 *
188 * Get the mask of host events that cause wake from suspend.
189 *
190 * @ec_dev: EC device to call
191 * @msg: message structure to use
192 * @mask: result when function returns >=0.
193 *
194 * LOCKING:
195 * the caller has ec_dev->lock mutex, or the caller knows there is
196 * no other command in progress.
197 */
198static int cros_ec_get_host_event_wake_mask(struct cros_ec_device *ec_dev,
199 struct cros_ec_command *msg,
200 uint32_t *mask)
201{
202 struct ec_response_host_event_mask *r;
203 int ret;
204
205 msg->command = EC_CMD_HOST_EVENT_GET_WAKE_MASK;
206 msg->version = 0;
207 msg->outsize = 0;
208 msg->insize = sizeof(*r);
209
210 ret = send_command(ec_dev, msg);
211 if (ret >= 0) {
212 if (msg->result == EC_RES_INVALID_COMMAND)
213 return -EOPNOTSUPP;
214 if (msg->result != EC_RES_SUCCESS)
215 return -EPROTO;
216 }
217 if (ret > 0) {
218 r = (struct ec_response_host_event_mask *)msg->data;
219 *mask = r->mask;
220 }
221
222 return ret;
223}
224
225static int cros_ec_host_command_proto_query(struct cros_ec_device *ec_dev,
226 int devidx,
227 struct cros_ec_command *msg)
228{
229 /*
230 * Try using v3+ to query for supported protocols. If this
231 * command fails, fall back to v2. Returns the highest protocol
232 * supported by the EC.
233 * Also sets the max request/response/passthru size.
234 */
235 int ret;
236
237 if (!ec_dev->pkt_xfer)
238 return -EPROTONOSUPPORT;
239
240 memset(msg, 0, sizeof(*msg));
241 msg->command = EC_CMD_PASSTHRU_OFFSET(devidx) | EC_CMD_GET_PROTOCOL_INFO;
242 msg->insize = sizeof(struct ec_response_get_protocol_info);
243
244 ret = send_command(ec_dev, msg);
245
246 if (ret < 0) {
247 dev_dbg(ec_dev->dev,
248 "failed to check for EC[%d] protocol version: %d\n",
249 devidx, ret);
250 return ret;
251 }
252
253 if (devidx > 0 && msg->result == EC_RES_INVALID_COMMAND)
254 return -ENODEV;
255 else if (msg->result != EC_RES_SUCCESS)
256 return msg->result;
257
258 return 0;
259}
260
261static int cros_ec_host_command_proto_query_v2(struct cros_ec_device *ec_dev)
262{
263 struct cros_ec_command *msg;
264 struct ec_params_hello *hello_params;
265 struct ec_response_hello *hello_response;
266 int ret;
267 int len = max(sizeof(*hello_params), sizeof(*hello_response));
268
269 msg = kmalloc(sizeof(*msg) + len, GFP_KERNEL);
270 if (!msg)
271 return -ENOMEM;
272
273 msg->version = 0;
274 msg->command = EC_CMD_HELLO;
275 hello_params = (struct ec_params_hello *)msg->data;
276 msg->outsize = sizeof(*hello_params);
277 hello_response = (struct ec_response_hello *)msg->data;
278 msg->insize = sizeof(*hello_response);
279
280 hello_params->in_data = 0xa0b0c0d0;
281
282 ret = send_command(ec_dev, msg);
283
284 if (ret < 0) {
285 dev_dbg(ec_dev->dev,
286 "EC failed to respond to v2 hello: %d\n",
287 ret);
288 goto exit;
289 } else if (msg->result != EC_RES_SUCCESS) {
290 dev_err(ec_dev->dev,
291 "EC responded to v2 hello with error: %d\n",
292 msg->result);
293 ret = msg->result;
294 goto exit;
295 } else if (hello_response->out_data != 0xa1b2c3d4) {
296 dev_err(ec_dev->dev,
297 "EC responded to v2 hello with bad result: %u\n",
298 hello_response->out_data);
299 ret = -EBADMSG;
300 goto exit;
301 }
302
303 ret = 0;
304
305 exit:
306 kfree(msg);
307 return ret;
308}
309
310/*
311 * cros_ec_get_host_command_version_mask
312 *
313 * Get the version mask of a given command.
314 *
315 * @ec_dev: EC device to call
316 * @msg: message structure to use
317 * @cmd: command to get the version of.
318 * @mask: result when function returns 0.
319 *
320 * @return 0 on success, error code otherwise
321 *
322 * LOCKING:
323 * the caller has ec_dev->lock mutex or the caller knows there is
324 * no other command in progress.
325 */
326static int cros_ec_get_host_command_version_mask(struct cros_ec_device *ec_dev,
327 u16 cmd, u32 *mask)
328{
329 struct ec_params_get_cmd_versions *pver;
330 struct ec_response_get_cmd_versions *rver;
331 struct cros_ec_command *msg;
332 int ret;
333
334 msg = kmalloc(sizeof(*msg) + max(sizeof(*rver), sizeof(*pver)),
335 GFP_KERNEL);
336 if (!msg)
337 return -ENOMEM;
338
339 msg->version = 0;
340 msg->command = EC_CMD_GET_CMD_VERSIONS;
341 msg->insize = sizeof(*rver);
342 msg->outsize = sizeof(*pver);
343
344 pver = (struct ec_params_get_cmd_versions *)msg->data;
345 pver->cmd = cmd;
346
347 ret = send_command(ec_dev, msg);
348 if (ret > 0) {
349 rver = (struct ec_response_get_cmd_versions *)msg->data;
350 *mask = rver->version_mask;
351 }
352
353 kfree(msg);
354
355 return ret;
356}
357
358/**
359 * cros_ec_query_all() - Query the protocol version supported by the
360 * ChromeOS EC.
361 * @ec_dev: Device to register.
362 *
363 * Return: 0 on success or negative error code.
364 */
365int cros_ec_query_all(struct cros_ec_device *ec_dev)
366{
367 struct device *dev = ec_dev->dev;
368 struct cros_ec_command *proto_msg;
369 struct ec_response_get_protocol_info *proto_info;
370 u32 ver_mask = 0;
371 int ret;
372
373 proto_msg = kzalloc(sizeof(*proto_msg) + sizeof(*proto_info),
374 GFP_KERNEL);
375 if (!proto_msg)
376 return -ENOMEM;
377
378 /* First try sending with proto v3. */
379 ec_dev->proto_version = 3;
380 ret = cros_ec_host_command_proto_query(ec_dev, 0, proto_msg);
381
382 if (ret == 0) {
383 proto_info = (struct ec_response_get_protocol_info *)
384 proto_msg->data;
385 ec_dev->max_request = proto_info->max_request_packet_size -
386 sizeof(struct ec_host_request);
387 ec_dev->max_response = proto_info->max_response_packet_size -
388 sizeof(struct ec_host_response);
389 ec_dev->proto_version =
390 min(EC_HOST_REQUEST_VERSION,
391 fls(proto_info->protocol_versions) - 1);
392 dev_dbg(ec_dev->dev,
393 "using proto v%u\n",
394 ec_dev->proto_version);
395
396 ec_dev->din_size = ec_dev->max_response +
397 sizeof(struct ec_host_response) +
398 EC_MAX_RESPONSE_OVERHEAD;
399 ec_dev->dout_size = ec_dev->max_request +
400 sizeof(struct ec_host_request) +
401 EC_MAX_REQUEST_OVERHEAD;
402
403 /*
404 * Check for PD
405 */
406 ret = cros_ec_host_command_proto_query(ec_dev, 1, proto_msg);
407
408 if (ret) {
409 dev_dbg(ec_dev->dev, "no PD chip found: %d\n", ret);
410 ec_dev->max_passthru = 0;
411 } else {
412 dev_dbg(ec_dev->dev, "found PD chip\n");
413 ec_dev->max_passthru =
414 proto_info->max_request_packet_size -
415 sizeof(struct ec_host_request);
416 }
417 } else {
418 /* Try querying with a v2 hello message. */
419 ec_dev->proto_version = 2;
420 ret = cros_ec_host_command_proto_query_v2(ec_dev);
421
422 if (ret == 0) {
423 /* V2 hello succeeded. */
424 dev_dbg(ec_dev->dev, "falling back to proto v2\n");
425
426 ec_dev->max_request = EC_PROTO2_MAX_PARAM_SIZE;
427 ec_dev->max_response = EC_PROTO2_MAX_PARAM_SIZE;
428 ec_dev->max_passthru = 0;
429 ec_dev->pkt_xfer = NULL;
430 ec_dev->din_size = EC_PROTO2_MSG_BYTES;
431 ec_dev->dout_size = EC_PROTO2_MSG_BYTES;
432 } else {
433 /*
434 * It's possible for a test to occur too early when
435 * the EC isn't listening. If this happens, we'll
436 * test later when the first command is run.
437 */
438 ec_dev->proto_version = EC_PROTO_VERSION_UNKNOWN;
439 dev_dbg(ec_dev->dev, "EC query failed: %d\n", ret);
440 goto exit;
441 }
442 }
443
444 devm_kfree(dev, ec_dev->din);
445 devm_kfree(dev, ec_dev->dout);
446
447 ec_dev->din = devm_kzalloc(dev, ec_dev->din_size, GFP_KERNEL);
448 if (!ec_dev->din) {
449 ret = -ENOMEM;
450 goto exit;
451 }
452
453 ec_dev->dout = devm_kzalloc(dev, ec_dev->dout_size, GFP_KERNEL);
454 if (!ec_dev->dout) {
455 devm_kfree(dev, ec_dev->din);
456 ret = -ENOMEM;
457 goto exit;
458 }
459
460 /* Probe if MKBP event is supported */
461 ret = cros_ec_get_host_command_version_mask(ec_dev,
462 EC_CMD_GET_NEXT_EVENT,
463 &ver_mask);
464 if (ret < 0 || ver_mask == 0)
465 ec_dev->mkbp_event_supported = 0;
466 else
467 ec_dev->mkbp_event_supported = fls(ver_mask);
468
469 dev_dbg(ec_dev->dev, "MKBP support version %u\n",
470 ec_dev->mkbp_event_supported - 1);
471
472 /* Probe if host sleep v1 is supported for S0ix failure detection. */
473 ret = cros_ec_get_host_command_version_mask(ec_dev,
474 EC_CMD_HOST_SLEEP_EVENT,
475 &ver_mask);
476 ec_dev->host_sleep_v1 = (ret >= 0 && (ver_mask & EC_VER_MASK(1)));
477
478 /* Get host event wake mask. */
479 ret = cros_ec_get_host_event_wake_mask(ec_dev, proto_msg,
480 &ec_dev->host_event_wake_mask);
481 if (ret < 0) {
482 /*
483 * If the EC doesn't support EC_CMD_HOST_EVENT_GET_WAKE_MASK,
484 * use a reasonable default. Note that we ignore various
485 * battery, AC status, and power-state events, because (a)
486 * those can be quite common (e.g., when sitting at full
487 * charge, on AC) and (b) these are not actionable wake events;
488 * if anything, we'd like to continue suspending (to save
489 * power), not wake up.
490 */
491 ec_dev->host_event_wake_mask = U32_MAX &
492 ~(BIT(EC_HOST_EVENT_AC_DISCONNECTED) |
493 BIT(EC_HOST_EVENT_BATTERY_LOW) |
494 BIT(EC_HOST_EVENT_BATTERY_CRITICAL) |
495 BIT(EC_HOST_EVENT_PD_MCU) |
496 BIT(EC_HOST_EVENT_BATTERY_STATUS));
497 /*
498 * Old ECs may not support this command. Complain about all
499 * other errors.
500 */
501 if (ret != -EOPNOTSUPP)
502 dev_err(ec_dev->dev,
503 "failed to retrieve wake mask: %d\n", ret);
504 }
505
506 ret = 0;
507
508exit:
509 kfree(proto_msg);
510 return ret;
511}
512EXPORT_SYMBOL(cros_ec_query_all);
513
514/**
515 * cros_ec_cmd_xfer() - Send a command to the ChromeOS EC.
516 * @ec_dev: EC device.
517 * @msg: Message to write.
518 *
519 * Call this to send a command to the ChromeOS EC. This should be used
520 * instead of calling the EC's cmd_xfer() callback directly.
521 *
522 * Return: 0 on success or negative error code.
523 */
524static int cros_ec_cmd_xfer(struct cros_ec_device *ec_dev,
525 struct cros_ec_command *msg)
526{
527 int ret;
528
529 mutex_lock(&ec_dev->lock);
530 if (ec_dev->proto_version == EC_PROTO_VERSION_UNKNOWN) {
531 ret = cros_ec_query_all(ec_dev);
532 if (ret) {
533 dev_err(ec_dev->dev,
534 "EC version unknown and query failed; aborting command\n");
535 mutex_unlock(&ec_dev->lock);
536 return ret;
537 }
538 }
539
540 if (msg->insize > ec_dev->max_response) {
541 dev_dbg(ec_dev->dev, "clamping message receive buffer\n");
542 msg->insize = ec_dev->max_response;
543 }
544
545 if (msg->command < EC_CMD_PASSTHRU_OFFSET(1)) {
546 if (msg->outsize > ec_dev->max_request) {
547 dev_err(ec_dev->dev,
548 "request of size %u is too big (max: %u)\n",
549 msg->outsize,
550 ec_dev->max_request);
551 mutex_unlock(&ec_dev->lock);
552 return -EMSGSIZE;
553 }
554 } else {
555 if (msg->outsize > ec_dev->max_passthru) {
556 dev_err(ec_dev->dev,
557 "passthru rq of size %u is too big (max: %u)\n",
558 msg->outsize,
559 ec_dev->max_passthru);
560 mutex_unlock(&ec_dev->lock);
561 return -EMSGSIZE;
562 }
563 }
564 ret = send_command(ec_dev, msg);
565 mutex_unlock(&ec_dev->lock);
566
567 return ret;
568}
569
570/**
571 * cros_ec_cmd_xfer_status() - Send a command to the ChromeOS EC.
572 * @ec_dev: EC device.
573 * @msg: Message to write.
574 *
575 * This function is identical to cros_ec_cmd_xfer, except it returns success
576 * status only if both the command was transmitted successfully and the EC
577 * replied with success status. It's not necessary to check msg->result when
578 * using this function.
579 *
580 * Return:
581 * >=0 - The number of bytes transferred
582 * -ENOTSUPP - Operation not supported
583 * -EPROTO - Protocol error
584 */
585int cros_ec_cmd_xfer_status(struct cros_ec_device *ec_dev,
586 struct cros_ec_command *msg)
587{
588 int ret;
589
590 ret = cros_ec_cmd_xfer(ec_dev, msg);
591 if (ret < 0) {
592 dev_err(ec_dev->dev, "Command xfer error (err:%d)\n", ret);
593 } else if (msg->result == EC_RES_INVALID_VERSION) {
594 dev_dbg(ec_dev->dev, "Command invalid version (err:%d)\n",
595 msg->result);
596 return -ENOTSUPP;
597 } else if (msg->result != EC_RES_SUCCESS) {
598 dev_dbg(ec_dev->dev, "Command result (err: %d)\n", msg->result);
599 return -EPROTO;
600 }
601
602 return ret;
603}
604EXPORT_SYMBOL(cros_ec_cmd_xfer_status);
605
606static int get_next_event_xfer(struct cros_ec_device *ec_dev,
607 struct cros_ec_command *msg,
608 struct ec_response_get_next_event_v1 *event,
609 int version, uint32_t size)
610{
611 int ret;
612
613 msg->version = version;
614 msg->command = EC_CMD_GET_NEXT_EVENT;
615 msg->insize = size;
616 msg->outsize = 0;
617
618 ret = cros_ec_cmd_xfer(ec_dev, msg);
619 if (ret > 0) {
620 ec_dev->event_size = ret - 1;
621 ec_dev->event_data = *event;
622 }
623
624 return ret;
625}
626
627static int get_next_event(struct cros_ec_device *ec_dev)
628{
629 struct {
630 struct cros_ec_command msg;
631 struct ec_response_get_next_event_v1 event;
632 } __packed buf;
633 struct cros_ec_command *msg = &buf.msg;
634 struct ec_response_get_next_event_v1 *event = &buf.event;
635 const int cmd_version = ec_dev->mkbp_event_supported - 1;
636
637 memset(msg, 0, sizeof(*msg));
638 if (ec_dev->suspended) {
639 dev_dbg(ec_dev->dev, "Device suspended.\n");
640 return -EHOSTDOWN;
641 }
642
643 if (cmd_version == 0)
644 return get_next_event_xfer(ec_dev, msg, event, 0,
645 sizeof(struct ec_response_get_next_event));
646
647 return get_next_event_xfer(ec_dev, msg, event, cmd_version,
648 sizeof(struct ec_response_get_next_event_v1));
649}
650
651static int get_keyboard_state_event(struct cros_ec_device *ec_dev)
652{
653 u8 buffer[sizeof(struct cros_ec_command) +
654 sizeof(ec_dev->event_data.data)];
655 struct cros_ec_command *msg = (struct cros_ec_command *)&buffer;
656
657 msg->version = 0;
658 msg->command = EC_CMD_MKBP_STATE;
659 msg->insize = sizeof(ec_dev->event_data.data);
660 msg->outsize = 0;
661
662 ec_dev->event_size = cros_ec_cmd_xfer(ec_dev, msg);
663 ec_dev->event_data.event_type = EC_MKBP_EVENT_KEY_MATRIX;
664 memcpy(&ec_dev->event_data.data, msg->data,
665 sizeof(ec_dev->event_data.data));
666
667 return ec_dev->event_size;
668}
669
670/**
671 * cros_ec_get_next_event() - Fetch next event from the ChromeOS EC.
672 * @ec_dev: Device to fetch event from.
673 * @wake_event: Pointer to a bool set to true upon return if the event might be
674 * treated as a wake event. Ignored if null.
675 * @has_more_events: Pointer to bool set to true if more than one event is
676 * pending.
677 * Some EC will set this flag to indicate cros_ec_get_next_event()
678 * can be called multiple times in a row.
679 * It is an optimization to prevent issuing a EC command for
680 * nothing or wait for another interrupt from the EC to process
681 * the next message.
682 * Ignored if null.
683 *
684 * Return: negative error code on errors; 0 for no data; or else number of
685 * bytes received (i.e., an event was retrieved successfully). Event types are
686 * written out to @ec_dev->event_data.event_type on success.
687 */
688int cros_ec_get_next_event(struct cros_ec_device *ec_dev,
689 bool *wake_event,
690 bool *has_more_events)
691{
692 u8 event_type;
693 u32 host_event;
694 int ret;
695
696 /*
697 * Default value for wake_event.
698 * Wake up on keyboard event, wake up for spurious interrupt or link
699 * error to the EC.
700 */
701 if (wake_event)
702 *wake_event = true;
703
704 /*
705 * Default value for has_more_events.
706 * EC will raise another interrupt if AP does not process all events
707 * anyway.
708 */
709 if (has_more_events)
710 *has_more_events = false;
711
712 if (!ec_dev->mkbp_event_supported)
713 return get_keyboard_state_event(ec_dev);
714
715 ret = get_next_event(ec_dev);
716 if (ret <= 0)
717 return ret;
718
719 if (has_more_events)
720 *has_more_events = ec_dev->event_data.event_type &
721 EC_MKBP_HAS_MORE_EVENTS;
722 ec_dev->event_data.event_type &= EC_MKBP_EVENT_TYPE_MASK;
723
724 if (wake_event) {
725 event_type = ec_dev->event_data.event_type;
726 host_event = cros_ec_get_host_event(ec_dev);
727
728 /*
729 * Sensor events need to be parsed by the sensor sub-device.
730 * Defer them, and don't report the wakeup here.
731 */
732 if (event_type == EC_MKBP_EVENT_SENSOR_FIFO)
733 *wake_event = false;
734 /* Masked host-events should not count as wake events. */
735 else if (host_event &&
736 !(host_event & ec_dev->host_event_wake_mask))
737 *wake_event = false;
738 }
739
740 return ret;
741}
742EXPORT_SYMBOL(cros_ec_get_next_event);
743
744/**
745 * cros_ec_get_host_event() - Return a mask of event set by the ChromeOS EC.
746 * @ec_dev: Device to fetch event from.
747 *
748 * When MKBP is supported, when the EC raises an interrupt, we collect the
749 * events raised and call the functions in the ec notifier. This function
750 * is a helper to know which events are raised.
751 *
752 * Return: 0 on error or non-zero bitmask of one or more EC_HOST_EVENT_*.
753 */
754u32 cros_ec_get_host_event(struct cros_ec_device *ec_dev)
755{
756 u32 host_event;
757
758 BUG_ON(!ec_dev->mkbp_event_supported);
759
760 if (ec_dev->event_data.event_type != EC_MKBP_EVENT_HOST_EVENT)
761 return 0;
762
763 if (ec_dev->event_size != sizeof(host_event)) {
764 dev_warn(ec_dev->dev, "Invalid host event size\n");
765 return 0;
766 }
767
768 host_event = get_unaligned_le32(&ec_dev->event_data.data.host_event);
769
770 return host_event;
771}
772EXPORT_SYMBOL(cros_ec_get_host_event);
773
774/**
775 * cros_ec_check_features() - Test for the presence of EC features
776 *
777 * @ec: EC device, does not have to be connected directly to the AP,
778 * can be daisy chained through another device.
779 * @feature: One of ec_feature_code bit.
780 *
781 * Call this function to test whether the ChromeOS EC supports a feature.
782 *
783 * Return: 1 if supported, 0 if not
784 */
785int cros_ec_check_features(struct cros_ec_dev *ec, int feature)
786{
787 struct cros_ec_command *msg;
788 int ret;
789
790 if (ec->features[0] == -1U && ec->features[1] == -1U) {
791 /* features bitmap not read yet */
792 msg = kzalloc(sizeof(*msg) + sizeof(ec->features), GFP_KERNEL);
793 if (!msg)
794 return -ENOMEM;
795
796 msg->command = EC_CMD_GET_FEATURES + ec->cmd_offset;
797 msg->insize = sizeof(ec->features);
798
799 ret = cros_ec_cmd_xfer_status(ec->ec_dev, msg);
800 if (ret < 0) {
801 dev_warn(ec->dev, "cannot get EC features: %d/%d\n",
802 ret, msg->result);
803 memset(ec->features, 0, sizeof(ec->features));
804 } else {
805 memcpy(ec->features, msg->data, sizeof(ec->features));
806 }
807
808 dev_dbg(ec->dev, "EC features %08x %08x\n",
809 ec->features[0], ec->features[1]);
810
811 kfree(msg);
812 }
813
814 return ec->features[feature / 32] & EC_FEATURE_MASK_0(feature);
815}
816EXPORT_SYMBOL_GPL(cros_ec_check_features);
817
818/**
819 * cros_ec_get_sensor_count() - Return the number of MEMS sensors supported.
820 *
821 * @ec: EC device, does not have to be connected directly to the AP,
822 * can be daisy chained through another device.
823 * Return: < 0 in case of error.
824 */
825int cros_ec_get_sensor_count(struct cros_ec_dev *ec)
826{
827 /*
828 * Issue a command to get the number of sensor reported.
829 * If not supported, check for legacy mode.
830 */
831 int ret, sensor_count;
832 struct ec_params_motion_sense *params;
833 struct ec_response_motion_sense *resp;
834 struct cros_ec_command *msg;
835 struct cros_ec_device *ec_dev = ec->ec_dev;
836 u8 status;
837
838 msg = kzalloc(sizeof(*msg) + max(sizeof(*params), sizeof(*resp)),
839 GFP_KERNEL);
840 if (!msg)
841 return -ENOMEM;
842
843 msg->version = 1;
844 msg->command = EC_CMD_MOTION_SENSE_CMD + ec->cmd_offset;
845 msg->outsize = sizeof(*params);
846 msg->insize = sizeof(*resp);
847
848 params = (struct ec_params_motion_sense *)msg->data;
849 params->cmd = MOTIONSENSE_CMD_DUMP;
850
851 ret = cros_ec_cmd_xfer(ec->ec_dev, msg);
852 if (ret < 0) {
853 sensor_count = ret;
854 } else if (msg->result != EC_RES_SUCCESS) {
855 sensor_count = -EPROTO;
856 } else {
857 resp = (struct ec_response_motion_sense *)msg->data;
858 sensor_count = resp->dump.sensor_count;
859 }
860 kfree(msg);
861
862 /*
863 * Check legacy mode: Let's find out if sensors are accessible
864 * via LPC interface.
865 */
866 if (sensor_count == -EPROTO &&
867 ec->cmd_offset == 0 &&
868 ec_dev->cmd_readmem) {
869 ret = ec_dev->cmd_readmem(ec_dev, EC_MEMMAP_ACC_STATUS,
870 1, &status);
871 if (ret >= 0 &&
872 (status & EC_MEMMAP_ACC_STATUS_PRESENCE_BIT)) {
873 /*
874 * We have 2 sensors, one in the lid, one in the base.
875 */
876 sensor_count = 2;
877 } else {
878 /*
879 * EC uses LPC interface and no sensors are presented.
880 */
881 sensor_count = 0;
882 }
883 } else if (sensor_count == -EPROTO) {
884 /* EC responded, but does not understand DUMP command. */
885 sensor_count = 0;
886 }
887 return sensor_count;
888}
889EXPORT_SYMBOL_GPL(cros_ec_get_sensor_count);