1 // SPDX-License-Identifier: ISC 2 /* 3 * Copyright (C) 2018 Lorenzo Bianconi <lorenzo.bianconi83@gmail.com> 4 */ 5 6 #include <linux/module.h> 7 #include <linux/firmware.h> 8 9 #include "mt76x02.h" 10 #include "mt76x02_mcu.h" 11 #include "mt76x02_usb.h" 12 13 #define MT_CMD_HDR_LEN 4 14 15 #define MT_FCE_DMA_ADDR 0x0230 16 #define MT_FCE_DMA_LEN 0x0234 17 18 #define MT_TX_CPU_FROM_FCE_CPU_DESC_IDX 0x09a8 19 20 static void 21 mt76x02u_multiple_mcu_reads(struct mt76_dev *dev, u8 *data, int len) 22 { 23 struct mt76_usb *usb = &dev->usb; 24 int i; 25 26 WARN_ON_ONCE(len / 8 != usb->mcu.rp_len); 27 28 for (i = 0; i < usb->mcu.rp_len; i++) { 29 u32 reg = get_unaligned_le32(data + 8 * i) - usb->mcu.base; 30 u32 val = get_unaligned_le32(data + 8 * i + 4); 31 32 WARN_ON_ONCE(usb->mcu.rp[i].reg != reg); 33 usb->mcu.rp[i].value = val; 34 } 35 } 36 37 static int mt76x02u_mcu_wait_resp(struct mt76_dev *dev, u8 seq) 38 { 39 struct mt76_usb *usb = &dev->usb; 40 u8 *data = usb->mcu.data; 41 int i, len, ret; 42 u32 rxfce; 43 44 for (i = 0; i < 5; i++) { 45 ret = mt76u_bulk_msg(dev, data, MCU_RESP_URB_SIZE, &len, 46 300, MT_EP_IN_CMD_RESP); 47 if (ret == -ETIMEDOUT) 48 continue; 49 if (ret) 50 goto out; 51 52 if (usb->mcu.rp) 53 mt76x02u_multiple_mcu_reads(dev, data + 4, len - 8); 54 55 rxfce = get_unaligned_le32(data); 56 if (seq == FIELD_GET(MT_RX_FCE_INFO_CMD_SEQ, rxfce) && 57 FIELD_GET(MT_RX_FCE_INFO_EVT_TYPE, rxfce) == EVT_CMD_DONE) 58 return 0; 59 60 dev_err(dev->dev, "error: MCU resp evt:%lx seq:%hhx-%lx\n", 61 FIELD_GET(MT_RX_FCE_INFO_EVT_TYPE, rxfce), 62 seq, FIELD_GET(MT_RX_FCE_INFO_CMD_SEQ, rxfce)); 63 } 64 out: 65 dev_err(dev->dev, "error: %s failed with %d\n", __func__, ret); 66 return ret; 67 } 68 69 static int 70 __mt76x02u_mcu_send_msg(struct mt76_dev *dev, struct sk_buff *skb, 71 int cmd, bool wait_resp) 72 { 73 u8 seq = 0; 74 u32 info; 75 int ret; 76 77 if (test_bit(MT76_REMOVED, &dev->phy.state)) { 78 ret = 0; 79 goto out; 80 } 81 82 if (wait_resp) { 83 seq = ++dev->mcu.msg_seq & 0xf; 84 if (!seq) 85 seq = ++dev->mcu.msg_seq & 0xf; 86 } 87 88 info = FIELD_PREP(MT_MCU_MSG_CMD_SEQ, seq) | 89 FIELD_PREP(MT_MCU_MSG_CMD_TYPE, cmd) | 90 MT_MCU_MSG_TYPE_CMD; 91 ret = mt76x02u_skb_dma_info(skb, CPU_TX_PORT, info); 92 if (ret) 93 return ret; 94 95 ret = mt76u_bulk_msg(dev, skb->data, skb->len, NULL, 500, 96 MT_EP_OUT_INBAND_CMD); 97 if (ret) 98 goto out; 99 100 if (wait_resp) 101 ret = mt76x02u_mcu_wait_resp(dev, seq); 102 103 out: 104 consume_skb(skb); 105 106 return ret; 107 } 108 109 static int 110 mt76x02u_mcu_send_msg(struct mt76_dev *dev, int cmd, const void *data, 111 int len, bool wait_resp) 112 { 113 struct sk_buff *skb; 114 int err; 115 116 skb = mt76_mcu_msg_alloc(dev, data, len); 117 if (!skb) 118 return -ENOMEM; 119 120 mutex_lock(&dev->mcu.mutex); 121 err = __mt76x02u_mcu_send_msg(dev, skb, cmd, wait_resp); 122 mutex_unlock(&dev->mcu.mutex); 123 124 return err; 125 } 126 127 static inline void skb_put_le32(struct sk_buff *skb, u32 val) 128 { 129 put_unaligned_le32(val, skb_put(skb, 4)); 130 } 131 132 static int 133 mt76x02u_mcu_wr_rp(struct mt76_dev *dev, u32 base, 134 const struct mt76_reg_pair *data, int n) 135 { 136 const int max_vals_per_cmd = MT_INBAND_PACKET_MAX_LEN / 8; 137 const int CMD_RANDOM_WRITE = 12; 138 struct sk_buff *skb; 139 int cnt, i, ret; 140 141 if (!n) 142 return 0; 143 144 cnt = min(max_vals_per_cmd, n); 145 146 skb = alloc_skb(cnt * 8 + MT_DMA_HDR_LEN + 4, GFP_KERNEL); 147 if (!skb) 148 return -ENOMEM; 149 skb_reserve(skb, MT_DMA_HDR_LEN); 150 151 for (i = 0; i < cnt; i++) { 152 skb_put_le32(skb, base + data[i].reg); 153 skb_put_le32(skb, data[i].value); 154 } 155 156 mutex_lock(&dev->mcu.mutex); 157 ret = __mt76x02u_mcu_send_msg(dev, skb, CMD_RANDOM_WRITE, cnt == n); 158 mutex_unlock(&dev->mcu.mutex); 159 if (ret) 160 return ret; 161 162 return mt76x02u_mcu_wr_rp(dev, base, data + cnt, n - cnt); 163 } 164 165 static int 166 mt76x02u_mcu_rd_rp(struct mt76_dev *dev, u32 base, 167 struct mt76_reg_pair *data, int n) 168 { 169 const int CMD_RANDOM_READ = 10; 170 const int max_vals_per_cmd = MT_INBAND_PACKET_MAX_LEN / 8; 171 struct mt76_usb *usb = &dev->usb; 172 struct sk_buff *skb; 173 int cnt, i, ret; 174 175 if (!n) 176 return 0; 177 178 cnt = min(max_vals_per_cmd, n); 179 if (cnt != n) 180 return -EINVAL; 181 182 skb = alloc_skb(cnt * 8 + MT_DMA_HDR_LEN + 4, GFP_KERNEL); 183 if (!skb) 184 return -ENOMEM; 185 skb_reserve(skb, MT_DMA_HDR_LEN); 186 187 for (i = 0; i < cnt; i++) { 188 skb_put_le32(skb, base + data[i].reg); 189 skb_put_le32(skb, data[i].value); 190 } 191 192 mutex_lock(&dev->mcu.mutex); 193 194 usb->mcu.rp = data; 195 usb->mcu.rp_len = n; 196 usb->mcu.base = base; 197 198 ret = __mt76x02u_mcu_send_msg(dev, skb, CMD_RANDOM_READ, true); 199 200 usb->mcu.rp = NULL; 201 202 mutex_unlock(&dev->mcu.mutex); 203 204 return ret; 205 } 206 207 void mt76x02u_mcu_fw_reset(struct mt76x02_dev *dev) 208 { 209 mt76u_vendor_request(&dev->mt76, MT_VEND_DEV_MODE, 210 USB_DIR_OUT | USB_TYPE_VENDOR, 211 0x1, 0, NULL, 0); 212 } 213 EXPORT_SYMBOL_GPL(mt76x02u_mcu_fw_reset); 214 215 static int 216 __mt76x02u_mcu_fw_send_data(struct mt76x02_dev *dev, u8 *data, 217 const void *fw_data, int len, u32 dst_addr) 218 { 219 __le32 info; 220 u32 val; 221 int err, data_len; 222 223 info = cpu_to_le32(FIELD_PREP(MT_MCU_MSG_PORT, CPU_TX_PORT) | 224 FIELD_PREP(MT_MCU_MSG_LEN, len) | 225 MT_MCU_MSG_TYPE_CMD); 226 227 memcpy(data, &info, sizeof(info)); 228 memcpy(data + sizeof(info), fw_data, len); 229 memset(data + sizeof(info) + len, 0, 4); 230 231 mt76u_single_wr(&dev->mt76, MT_VEND_WRITE_FCE, 232 MT_FCE_DMA_ADDR, dst_addr); 233 len = roundup(len, 4); 234 mt76u_single_wr(&dev->mt76, MT_VEND_WRITE_FCE, 235 MT_FCE_DMA_LEN, len << 16); 236 237 data_len = MT_CMD_HDR_LEN + len + sizeof(info); 238 239 err = mt76u_bulk_msg(&dev->mt76, data, data_len, NULL, 1000, 240 MT_EP_OUT_INBAND_CMD); 241 if (err) { 242 dev_err(dev->mt76.dev, "firmware upload failed: %d\n", err); 243 return err; 244 } 245 246 val = mt76_rr(dev, MT_TX_CPU_FROM_FCE_CPU_DESC_IDX); 247 val++; 248 mt76_wr(dev, MT_TX_CPU_FROM_FCE_CPU_DESC_IDX, val); 249 250 return 0; 251 } 252 253 int mt76x02u_mcu_fw_send_data(struct mt76x02_dev *dev, const void *data, 254 int data_len, u32 max_payload, u32 offset) 255 { 256 int len, err = 0, pos = 0, max_len = max_payload - 8; 257 u8 *buf; 258 259 buf = kmalloc(max_payload, GFP_KERNEL); 260 if (!buf) 261 return -ENOMEM; 262 263 while (data_len > 0) { 264 len = min_t(int, data_len, max_len); 265 err = __mt76x02u_mcu_fw_send_data(dev, buf, data + pos, 266 len, offset + pos); 267 if (err < 0) 268 break; 269 270 data_len -= len; 271 pos += len; 272 usleep_range(5000, 10000); 273 } 274 kfree(buf); 275 276 return err; 277 } 278 EXPORT_SYMBOL_GPL(mt76x02u_mcu_fw_send_data); 279 280 void mt76x02u_init_mcu(struct mt76_dev *dev) 281 { 282 static const struct mt76_mcu_ops mt76x02u_mcu_ops = { 283 .headroom = MT_CMD_HDR_LEN, 284 .tailroom = 8, 285 .mcu_send_msg = mt76x02u_mcu_send_msg, 286 .mcu_parse_response = mt76x02_mcu_parse_response, 287 .mcu_wr_rp = mt76x02u_mcu_wr_rp, 288 .mcu_rd_rp = mt76x02u_mcu_rd_rp, 289 }; 290 291 dev->mcu_ops = &mt76x02u_mcu_ops; 292 } 293 EXPORT_SYMBOL_GPL(mt76x02u_init_mcu); 294 295 MODULE_AUTHOR("Lorenzo Bianconi <lorenzo.bianconi83@gmail.com>"); 296 MODULE_LICENSE("Dual BSD/GPL"); 297