Path: blob/master/drivers/misc/iwmc3200top/fw-download.c
15111 views
/*1* iwmc3200top - Intel Wireless MultiCom 3200 Top Driver2* drivers/misc/iwmc3200top/fw-download.c3*4* Copyright (C) 2009 Intel Corporation. All rights reserved.5*6* This program is free software; you can redistribute it and/or7* modify it under the terms of the GNU General Public License version8* 2 as published by the Free Software Foundation.9*10* This program is distributed in the hope that it will be useful,11* but WITHOUT ANY WARRANTY; without even the implied warranty of12* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the13* GNU General Public License for more details.14*15* You should have received a copy of the GNU General Public License16* along with this program; if not, write to the Free Software17* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA18* 02110-1301, USA.19*20*21* Author Name: Maxim Grabarnik <[email protected]>22* -23*24*/2526#include <linux/firmware.h>27#include <linux/mmc/sdio_func.h>28#include <linux/slab.h>29#include <asm/unaligned.h>3031#include "iwmc3200top.h"32#include "log.h"33#include "fw-msg.h"3435#define CHECKSUM_BYTES_NUM sizeof(u32)3637/**38init parser struct with file39*/40static int iwmct_fw_parser_init(struct iwmct_priv *priv, const u8 *file,41size_t file_size, size_t block_size)42{43struct iwmct_parser *parser = &priv->parser;44struct iwmct_fw_hdr *fw_hdr = &parser->versions;4546LOG_TRACE(priv, FW_DOWNLOAD, "-->\n");4748LOG_INFO(priv, FW_DOWNLOAD, "file_size=%zd\n", file_size);4950parser->file = file;51parser->file_size = file_size;52parser->cur_pos = 0;53parser->entry_point = 0;54parser->buf = kzalloc(block_size, GFP_KERNEL);55if (!parser->buf) {56LOG_ERROR(priv, FW_DOWNLOAD, "kzalloc error\n");57return -ENOMEM;58}59parser->buf_size = block_size;6061/* extract fw versions */62memcpy(fw_hdr, parser->file, sizeof(struct iwmct_fw_hdr));63LOG_INFO(priv, FW_DOWNLOAD, "fw versions are:\n"64"top %u.%u.%u gps %u.%u.%u bt %u.%u.%u tic %s\n",65fw_hdr->top_major, fw_hdr->top_minor, fw_hdr->top_revision,66fw_hdr->gps_major, fw_hdr->gps_minor, fw_hdr->gps_revision,67fw_hdr->bt_major, fw_hdr->bt_minor, fw_hdr->bt_revision,68fw_hdr->tic_name);6970parser->cur_pos += sizeof(struct iwmct_fw_hdr);7172LOG_TRACE(priv, FW_DOWNLOAD, "<--\n");73return 0;74}7576static bool iwmct_checksum(struct iwmct_priv *priv)77{78struct iwmct_parser *parser = &priv->parser;79__le32 *file = (__le32 *)parser->file;80int i, pad, steps;81u32 accum = 0;82u32 checksum;83u32 mask = 0xffffffff;8485pad = (parser->file_size - CHECKSUM_BYTES_NUM) % 4;86steps = (parser->file_size - CHECKSUM_BYTES_NUM) / 4;8788LOG_INFO(priv, FW_DOWNLOAD, "pad=%d steps=%d\n", pad, steps);8990for (i = 0; i < steps; i++)91accum += le32_to_cpu(file[i]);9293if (pad) {94mask <<= 8 * (4 - pad);95accum += le32_to_cpu(file[steps]) & mask;96}9798checksum = get_unaligned_le32((__le32 *)(parser->file +99parser->file_size - CHECKSUM_BYTES_NUM));100101LOG_INFO(priv, FW_DOWNLOAD,102"compare checksum accum=0x%x to checksum=0x%x\n",103accum, checksum);104105return checksum == accum;106}107108static int iwmct_parse_next_section(struct iwmct_priv *priv, const u8 **p_sec,109size_t *sec_size, __le32 *sec_addr)110{111struct iwmct_parser *parser = &priv->parser;112struct iwmct_dbg *dbg = &priv->dbg;113struct iwmct_fw_sec_hdr *sec_hdr;114115LOG_TRACE(priv, FW_DOWNLOAD, "-->\n");116117while (parser->cur_pos + sizeof(struct iwmct_fw_sec_hdr)118<= parser->file_size) {119120sec_hdr = (struct iwmct_fw_sec_hdr *)121(parser->file + parser->cur_pos);122parser->cur_pos += sizeof(struct iwmct_fw_sec_hdr);123124LOG_INFO(priv, FW_DOWNLOAD,125"sec hdr: type=%s addr=0x%x size=%d\n",126sec_hdr->type, sec_hdr->target_addr,127sec_hdr->data_size);128129if (strcmp(sec_hdr->type, "ENT") == 0)130parser->entry_point = le32_to_cpu(sec_hdr->target_addr);131else if (strcmp(sec_hdr->type, "LBL") == 0)132strcpy(dbg->label_fw, parser->file + parser->cur_pos);133else if (((strcmp(sec_hdr->type, "TOP") == 0) &&134(priv->barker & BARKER_DNLOAD_TOP_MSK)) ||135((strcmp(sec_hdr->type, "GPS") == 0) &&136(priv->barker & BARKER_DNLOAD_GPS_MSK)) ||137((strcmp(sec_hdr->type, "BTH") == 0) &&138(priv->barker & BARKER_DNLOAD_BT_MSK))) {139*sec_addr = sec_hdr->target_addr;140*sec_size = le32_to_cpu(sec_hdr->data_size);141*p_sec = parser->file + parser->cur_pos;142parser->cur_pos += le32_to_cpu(sec_hdr->data_size);143return 1;144} else if (strcmp(sec_hdr->type, "LOG") != 0)145LOG_WARNING(priv, FW_DOWNLOAD,146"skipping section type %s\n",147sec_hdr->type);148149parser->cur_pos += le32_to_cpu(sec_hdr->data_size);150LOG_INFO(priv, FW_DOWNLOAD,151"finished with section cur_pos=%zd\n", parser->cur_pos);152}153154LOG_TRACE(priv, INIT, "<--\n");155return 0;156}157158static int iwmct_download_section(struct iwmct_priv *priv, const u8 *p_sec,159size_t sec_size, __le32 addr)160{161struct iwmct_parser *parser = &priv->parser;162struct iwmct_fw_load_hdr *hdr = (struct iwmct_fw_load_hdr *)parser->buf;163const u8 *cur_block = p_sec;164size_t sent = 0;165int cnt = 0;166int ret = 0;167u32 cmd = 0;168169LOG_TRACE(priv, FW_DOWNLOAD, "-->\n");170LOG_INFO(priv, FW_DOWNLOAD, "Download address 0x%x size 0x%zx\n",171addr, sec_size);172173while (sent < sec_size) {174int i;175u32 chksm = 0;176u32 reset = atomic_read(&priv->reset);177/* actual FW data */178u32 data_size = min(parser->buf_size - sizeof(*hdr),179sec_size - sent);180/* Pad to block size */181u32 trans_size = (data_size + sizeof(*hdr) +182IWMC_SDIO_BLK_SIZE - 1) &183~(IWMC_SDIO_BLK_SIZE - 1);184++cnt;185186/* in case of reset, interrupt FW DOWNLAOD */187if (reset) {188LOG_INFO(priv, FW_DOWNLOAD,189"Reset detected. Abort FW download!!!");190ret = -ECANCELED;191goto exit;192}193194memset(parser->buf, 0, parser->buf_size);195cmd |= IWMC_OPCODE_WRITE << CMD_HDR_OPCODE_POS;196cmd |= IWMC_CMD_SIGNATURE << CMD_HDR_SIGNATURE_POS;197cmd |= (priv->dbg.direct ? 1 : 0) << CMD_HDR_DIRECT_ACCESS_POS;198cmd |= (priv->dbg.checksum ? 1 : 0) << CMD_HDR_USE_CHECKSUM_POS;199hdr->data_size = cpu_to_le32(data_size);200hdr->target_addr = addr;201202/* checksum is allowed for sizes divisible by 4 */203if (data_size & 0x3)204cmd &= ~CMD_HDR_USE_CHECKSUM_MSK;205206memcpy(hdr->data, cur_block, data_size);207208209if (cmd & CMD_HDR_USE_CHECKSUM_MSK) {210211chksm = data_size + le32_to_cpu(addr) + cmd;212for (i = 0; i < data_size >> 2; i++)213chksm += ((u32 *)cur_block)[i];214215hdr->block_chksm = cpu_to_le32(chksm);216LOG_INFO(priv, FW_DOWNLOAD, "Checksum = 0x%X\n",217hdr->block_chksm);218}219220LOG_INFO(priv, FW_DOWNLOAD, "trans#%d, len=%d, sent=%zd, "221"sec_size=%zd, startAddress 0x%X\n",222cnt, trans_size, sent, sec_size, addr);223224if (priv->dbg.dump)225LOG_HEXDUMP(FW_DOWNLOAD, parser->buf, trans_size);226227228hdr->cmd = cpu_to_le32(cmd);229/* send it down */230/* TODO: add more proper sending and error checking */231ret = iwmct_tx(priv, parser->buf, trans_size);232if (ret != 0) {233LOG_INFO(priv, FW_DOWNLOAD,234"iwmct_tx returned %d\n", ret);235goto exit;236}237238addr = cpu_to_le32(le32_to_cpu(addr) + data_size);239sent += data_size;240cur_block = p_sec + sent;241242if (priv->dbg.blocks && (cnt + 1) >= priv->dbg.blocks) {243LOG_INFO(priv, FW_DOWNLOAD,244"Block number limit is reached [%d]\n",245priv->dbg.blocks);246break;247}248}249250if (sent < sec_size)251ret = -EINVAL;252exit:253LOG_TRACE(priv, FW_DOWNLOAD, "<--\n");254return ret;255}256257static int iwmct_kick_fw(struct iwmct_priv *priv, bool jump)258{259struct iwmct_parser *parser = &priv->parser;260struct iwmct_fw_load_hdr *hdr = (struct iwmct_fw_load_hdr *)parser->buf;261int ret;262u32 cmd;263264LOG_TRACE(priv, FW_DOWNLOAD, "-->\n");265266memset(parser->buf, 0, parser->buf_size);267cmd = IWMC_CMD_SIGNATURE << CMD_HDR_SIGNATURE_POS;268if (jump) {269cmd |= IWMC_OPCODE_JUMP << CMD_HDR_OPCODE_POS;270hdr->target_addr = cpu_to_le32(parser->entry_point);271LOG_INFO(priv, FW_DOWNLOAD, "jump address 0x%x\n",272parser->entry_point);273} else {274cmd |= IWMC_OPCODE_LAST_COMMAND << CMD_HDR_OPCODE_POS;275LOG_INFO(priv, FW_DOWNLOAD, "last command\n");276}277278hdr->cmd = cpu_to_le32(cmd);279280LOG_HEXDUMP(FW_DOWNLOAD, parser->buf, sizeof(*hdr));281/* send it down */282/* TODO: add more proper sending and error checking */283ret = iwmct_tx(priv, parser->buf, IWMC_SDIO_BLK_SIZE);284if (ret)285LOG_INFO(priv, FW_DOWNLOAD, "iwmct_tx returned %d", ret);286287LOG_TRACE(priv, FW_DOWNLOAD, "<--\n");288return 0;289}290291int iwmct_fw_load(struct iwmct_priv *priv)292{293const u8 *fw_name = FW_NAME(FW_API_VER);294const struct firmware *raw;295const u8 *pdata;296size_t len;297__le32 addr;298int ret;299300301LOG_INFO(priv, FW_DOWNLOAD, "barker download request 0x%x is:\n",302priv->barker);303LOG_INFO(priv, FW_DOWNLOAD, "******* Top FW %s requested ********\n",304(priv->barker & BARKER_DNLOAD_TOP_MSK) ? "was" : "not");305LOG_INFO(priv, FW_DOWNLOAD, "******* GPS FW %s requested ********\n",306(priv->barker & BARKER_DNLOAD_GPS_MSK) ? "was" : "not");307LOG_INFO(priv, FW_DOWNLOAD, "******* BT FW %s requested ********\n",308(priv->barker & BARKER_DNLOAD_BT_MSK) ? "was" : "not");309310311/* get the firmware */312ret = request_firmware(&raw, fw_name, &priv->func->dev);313if (ret < 0) {314LOG_ERROR(priv, FW_DOWNLOAD, "%s request_firmware failed %d\n",315fw_name, ret);316goto exit;317}318319if (raw->size < sizeof(struct iwmct_fw_sec_hdr)) {320LOG_ERROR(priv, FW_DOWNLOAD, "%s smaller then (%zd) (%zd)\n",321fw_name, sizeof(struct iwmct_fw_sec_hdr), raw->size);322goto exit;323}324325LOG_INFO(priv, FW_DOWNLOAD, "Read firmware '%s'\n", fw_name);326327/* clear parser struct */328ret = iwmct_fw_parser_init(priv, raw->data, raw->size, priv->trans_len);329if (ret < 0) {330LOG_ERROR(priv, FW_DOWNLOAD,331"iwmct_parser_init failed: Reason %d\n", ret);332goto exit;333}334335if (!iwmct_checksum(priv)) {336LOG_ERROR(priv, FW_DOWNLOAD, "checksum error\n");337ret = -EINVAL;338goto exit;339}340341/* download firmware to device */342while (iwmct_parse_next_section(priv, &pdata, &len, &addr)) {343ret = iwmct_download_section(priv, pdata, len, addr);344if (ret) {345LOG_ERROR(priv, FW_DOWNLOAD,346"%s download section failed\n", fw_name);347goto exit;348}349}350351ret = iwmct_kick_fw(priv, !!(priv->barker & BARKER_DNLOAD_JUMP_MSK));352353exit:354kfree(priv->parser.buf);355release_firmware(raw);356return ret;357}358359360