1 /*- 2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD 3 * 4 * Copyright (c) 2005 Bruno Ducrot 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 1. Redistributions of source code must retain the above copyright 10 * notice, this list of conditions and the following disclaimer. 11 * 2. Redistributions in binary form must reproduce the above copyright 12 * notice, this list of conditions and the following disclaimer in the 13 * documentation and/or other materials provided with the distribution. 14 * 15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 16 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 17 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 18 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 19 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 20 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 21 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 22 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 23 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 24 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 25 */ 26 27 /* 28 * This driver is based upon information found by examining speedstep-0.5 29 * from Marc Lehman, which includes all the reverse engineering effort of 30 * Malik Martin (function 1 and 2 of the GSI). 31 * 32 * The correct way for the OS to take ownership from the BIOS was found by 33 * Hiroshi Miura (function 0 of the GSI). 34 * 35 * Finally, the int 15h call interface was (partially) documented by Intel. 36 * 37 * Many thanks to Jon Noack for testing and debugging this driver. 38 */ 39 40 #include <sys/cdefs.h> 41 __FBSDID("$FreeBSD$"); 42 43 #include <sys/param.h> 44 #include <sys/bus.h> 45 #include <sys/cpu.h> 46 #include <sys/kernel.h> 47 #include <sys/module.h> 48 #include <sys/mutex.h> 49 #include <sys/systm.h> 50 51 #include <machine/bus.h> 52 #include <machine/cputypes.h> 53 #include <machine/md_var.h> 54 #include <machine/vm86.h> 55 56 #include <dev/pci/pcivar.h> 57 #include <dev/pci/pcireg.h> 58 59 #include <vm/vm.h> 60 #include <vm/pmap.h> 61 62 #include "cpufreq_if.h" 63 64 #if 0 65 #define DPRINT(dev, x...) device_printf(dev, x) 66 #else 67 #define DPRINT(dev, x...) 68 #endif 69 70 struct smist_softc { 71 device_t dev; 72 int smi_cmd; 73 int smi_data; 74 int command; 75 int flags; 76 struct cf_setting sets[2]; /* Only two settings. */ 77 }; 78 79 static char smist_magic[] = "Copyright (c) 1999 Intel Corporation"; 80 81 static void smist_identify(driver_t *driver, device_t parent); 82 static int smist_probe(device_t dev); 83 static int smist_attach(device_t dev); 84 static int smist_detach(device_t dev); 85 static int smist_settings(device_t dev, struct cf_setting *sets, 86 int *count); 87 static int smist_set(device_t dev, const struct cf_setting *set); 88 static int smist_get(device_t dev, struct cf_setting *set); 89 static int smist_type(device_t dev, int *type); 90 91 static device_method_t smist_methods[] = { 92 /* Device interface */ 93 DEVMETHOD(device_identify, smist_identify), 94 DEVMETHOD(device_probe, smist_probe), 95 DEVMETHOD(device_attach, smist_attach), 96 DEVMETHOD(device_detach, smist_detach), 97 98 /* cpufreq interface */ 99 DEVMETHOD(cpufreq_drv_set, smist_set), 100 DEVMETHOD(cpufreq_drv_get, smist_get), 101 DEVMETHOD(cpufreq_drv_type, smist_type), 102 DEVMETHOD(cpufreq_drv_settings, smist_settings), 103 {0, 0} 104 }; 105 106 static driver_t smist_driver = { 107 "smist", smist_methods, sizeof(struct smist_softc) 108 }; 109 static devclass_t smist_devclass; 110 DRIVER_MODULE(smist, cpu, smist_driver, smist_devclass, 0, 0); 111 112 struct piix4_pci_device { 113 uint16_t vendor; 114 uint16_t device; 115 char *desc; 116 }; 117 118 static struct piix4_pci_device piix4_pci_devices[] = { 119 {0x8086, 0x7113, "Intel PIIX4 ISA bridge"}, 120 {0x8086, 0x719b, "Intel PIIX4 ISA bridge (embedded in MX440 chipset)"}, 121 122 {0, 0, NULL}, 123 }; 124 125 #define SET_OWNERSHIP 0 126 #define GET_STATE 1 127 #define SET_STATE 2 128 129 static int 130 int15_gsic_call(int *sig, int *smi_cmd, int *command, int *smi_data, int *flags) 131 { 132 struct vm86frame vmf; 133 134 bzero(&vmf, sizeof(vmf)); 135 vmf.vmf_eax = 0x0000E980; /* IST support */ 136 vmf.vmf_edx = 0x47534943; /* 'GSIC' in ASCII */ 137 vm86_intcall(0x15, &vmf); 138 139 if (vmf.vmf_eax == 0x47534943) { 140 *sig = vmf.vmf_eax; 141 *smi_cmd = vmf.vmf_ebx & 0xff; 142 *command = (vmf.vmf_ebx >> 16) & 0xff; 143 *smi_data = vmf.vmf_ecx; 144 *flags = vmf.vmf_edx; 145 } else { 146 *sig = -1; 147 *smi_cmd = -1; 148 *command = -1; 149 *smi_data = -1; 150 *flags = -1; 151 } 152 153 return (0); 154 } 155 156 /* Temporary structure to hold mapped page and status. */ 157 struct set_ownership_data { 158 int smi_cmd; 159 int command; 160 int result; 161 void *buf; 162 }; 163 164 /* Perform actual SMI call to enable SpeedStep. */ 165 static void 166 set_ownership_cb(void *arg, bus_dma_segment_t *segs, int nsegs, int error) 167 { 168 struct set_ownership_data *data; 169 170 data = arg; 171 if (error) { 172 data->result = error; 173 return; 174 } 175 176 /* Copy in the magic string and send it by writing to the SMI port. */ 177 strlcpy(data->buf, smist_magic, PAGE_SIZE); 178 __asm __volatile( 179 "movl $-1, %%edi\n\t" 180 "out %%al, (%%dx)\n" 181 : "=D" (data->result) 182 : "a" (data->command), 183 "b" (0), 184 "c" (0), 185 "d" (data->smi_cmd), 186 "S" ((uint32_t)segs[0].ds_addr) 187 ); 188 } 189 190 static int 191 set_ownership(device_t dev) 192 { 193 struct smist_softc *sc; 194 struct set_ownership_data cb_data; 195 bus_dma_tag_t tag; 196 bus_dmamap_t map; 197 198 /* 199 * Specify the region to store the magic string. Since its address is 200 * passed to the BIOS in a 32-bit register, we have to make sure it is 201 * located in a physical page below 4 GB (i.e., for PAE.) 202 */ 203 sc = device_get_softc(dev); 204 if (bus_dma_tag_create(/*parent*/ NULL, 205 /*alignment*/ PAGE_SIZE, /*no boundary*/ 0, 206 /*lowaddr*/ BUS_SPACE_MAXADDR_32BIT, /*highaddr*/ BUS_SPACE_MAXADDR, 207 NULL, NULL, /*maxsize*/ PAGE_SIZE, /*segments*/ 1, 208 /*maxsegsize*/ PAGE_SIZE, 0, busdma_lock_mutex, &Giant, 209 &tag) != 0) { 210 device_printf(dev, "can't create mem tag\n"); 211 return (ENXIO); 212 } 213 if (bus_dmamem_alloc(tag, &cb_data.buf, BUS_DMA_NOWAIT, &map) != 0) { 214 bus_dma_tag_destroy(tag); 215 device_printf(dev, "can't alloc mapped mem\n"); 216 return (ENXIO); 217 } 218 219 /* Load the physical page map and take ownership in the callback. */ 220 cb_data.smi_cmd = sc->smi_cmd; 221 cb_data.command = sc->command; 222 if (bus_dmamap_load(tag, map, cb_data.buf, PAGE_SIZE, set_ownership_cb, 223 &cb_data, BUS_DMA_NOWAIT) != 0) { 224 bus_dmamem_free(tag, cb_data.buf, map); 225 bus_dma_tag_destroy(tag); 226 device_printf(dev, "can't load mem\n"); 227 return (ENXIO); 228 } 229 DPRINT(dev, "taking ownership over BIOS return %d\n", cb_data.result); 230 bus_dmamap_unload(tag, map); 231 bus_dmamem_free(tag, cb_data.buf, map); 232 bus_dma_tag_destroy(tag); 233 return (cb_data.result ? ENXIO : 0); 234 } 235 236 static int 237 getset_state(struct smist_softc *sc, int *state, int function) 238 { 239 int new_state; 240 int result; 241 int eax; 242 243 if (!sc) 244 return (ENXIO); 245 246 if (function != GET_STATE && function != SET_STATE) 247 return (EINVAL); 248 249 DPRINT(sc->dev, "calling GSI\n"); 250 251 __asm __volatile( 252 "movl $-1, %%edi\n\t" 253 "out %%al, (%%dx)\n" 254 : "=a" (eax), 255 "=b" (new_state), 256 "=D" (result) 257 : "a" (sc->command), 258 "b" (function), 259 "c" (*state), 260 "d" (sc->smi_cmd) 261 ); 262 263 DPRINT(sc->dev, "GSI returned: eax %.8x ebx %.8x edi %.8x\n", 264 eax, new_state, result); 265 266 *state = new_state & 1; 267 268 switch (function) { 269 case GET_STATE: 270 if (eax) 271 return (ENXIO); 272 break; 273 case SET_STATE: 274 if (result) 275 return (ENXIO); 276 break; 277 } 278 return (0); 279 } 280 281 static void 282 smist_identify(driver_t *driver, device_t parent) 283 { 284 struct piix4_pci_device *id; 285 device_t piix4 = NULL; 286 287 if (resource_disabled("ichst", 0)) 288 return; 289 290 /* Check for a supported processor */ 291 if (cpu_vendor_id != CPU_VENDOR_INTEL) 292 return; 293 switch (cpu_id & 0xff0) { 294 case 0x680: /* Pentium III [coppermine] */ 295 case 0x6a0: /* Pentium III [Tualatin] */ 296 break; 297 default: 298 return; 299 } 300 301 /* Check for a supported PCI-ISA bridge */ 302 for (id = piix4_pci_devices; id->desc != NULL; ++id) { 303 if ((piix4 = pci_find_device(id->vendor, id->device)) != NULL) 304 break; 305 } 306 if (!piix4) 307 return; 308 309 if (bootverbose) 310 printf("smist: found supported isa bridge %s\n", id->desc); 311 312 if (device_find_child(parent, "smist", -1) != NULL) 313 return; 314 if (BUS_ADD_CHILD(parent, 30, "smist", device_get_unit(parent)) 315 == NULL) 316 device_printf(parent, "smist: add child failed\n"); 317 } 318 319 static int 320 smist_probe(device_t dev) 321 { 322 struct smist_softc *sc; 323 device_t ichss_dev, perf_dev; 324 int sig, smi_cmd, command, smi_data, flags; 325 int type; 326 int rv; 327 328 if (resource_disabled("smist", 0)) 329 return (ENXIO); 330 331 sc = device_get_softc(dev); 332 333 /* 334 * If the ACPI perf or ICH SpeedStep drivers have attached and not 335 * just offering info, let them manage things. 336 */ 337 perf_dev = device_find_child(device_get_parent(dev), "acpi_perf", -1); 338 if (perf_dev && device_is_attached(perf_dev)) { 339 rv = CPUFREQ_DRV_TYPE(perf_dev, &type); 340 if (rv == 0 && (type & CPUFREQ_FLAG_INFO_ONLY) == 0) 341 return (ENXIO); 342 } 343 ichss_dev = device_find_child(device_get_parent(dev), "ichss", -1); 344 if (ichss_dev && device_is_attached(ichss_dev)) 345 return (ENXIO); 346 347 int15_gsic_call(&sig, &smi_cmd, &command, &smi_data, &flags); 348 if (bootverbose) 349 device_printf(dev, "sig %.8x smi_cmd %.4x command %.2x " 350 "smi_data %.4x flags %.8x\n", 351 sig, smi_cmd, command, smi_data, flags); 352 353 if (sig != -1) { 354 sc->smi_cmd = smi_cmd; 355 sc->smi_data = smi_data; 356 357 /* 358 * Sometimes int 15h 'GSIC' returns 0x80 for command, when 359 * it is actually 0x82. The Windows driver will overwrite 360 * this value given by the registry. 361 */ 362 if (command == 0x80) { 363 device_printf(dev, 364 "GSIC returned cmd 0x80, should be 0x82\n"); 365 command = 0x82; 366 } 367 sc->command = (sig & 0xffffff00) | (command & 0xff); 368 sc->flags = flags; 369 } else { 370 /* Give some default values */ 371 sc->smi_cmd = 0xb2; 372 sc->smi_data = 0xb3; 373 sc->command = 0x47534982; 374 sc->flags = 0; 375 } 376 377 device_set_desc(dev, "SpeedStep SMI"); 378 379 return (-1500); 380 } 381 382 static int 383 smist_attach(device_t dev) 384 { 385 struct smist_softc *sc; 386 387 sc = device_get_softc(dev); 388 sc->dev = dev; 389 390 /* If we can't take ownership over BIOS, then bail out */ 391 if (set_ownership(dev) != 0) 392 return (ENXIO); 393 394 /* Setup some defaults for our exported settings. */ 395 sc->sets[0].freq = CPUFREQ_VAL_UNKNOWN; 396 sc->sets[0].volts = CPUFREQ_VAL_UNKNOWN; 397 sc->sets[0].power = CPUFREQ_VAL_UNKNOWN; 398 sc->sets[0].lat = 1000; 399 sc->sets[0].dev = dev; 400 sc->sets[1] = sc->sets[0]; 401 402 cpufreq_register(dev); 403 404 return (0); 405 } 406 407 static int 408 smist_detach(device_t dev) 409 { 410 411 return (cpufreq_unregister(dev)); 412 } 413 414 static int 415 smist_settings(device_t dev, struct cf_setting *sets, int *count) 416 { 417 struct smist_softc *sc; 418 struct cf_setting set; 419 int first, i; 420 421 if (sets == NULL || count == NULL) 422 return (EINVAL); 423 if (*count < 2) { 424 *count = 2; 425 return (E2BIG); 426 } 427 sc = device_get_softc(dev); 428 429 /* 430 * Estimate frequencies for both levels, temporarily switching to 431 * the other one if we haven't calibrated it yet. 432 */ 433 for (i = 0; i < 2; i++) { 434 if (sc->sets[i].freq == CPUFREQ_VAL_UNKNOWN) { 435 first = (i == 0) ? 1 : 0; 436 smist_set(dev, &sc->sets[i]); 437 smist_get(dev, &set); 438 smist_set(dev, &sc->sets[first]); 439 } 440 } 441 442 bcopy(sc->sets, sets, sizeof(sc->sets)); 443 *count = 2; 444 445 return (0); 446 } 447 448 static int 449 smist_set(device_t dev, const struct cf_setting *set) 450 { 451 struct smist_softc *sc; 452 int rv, state, req_state, try; 453 454 /* Look up appropriate bit value based on frequency. */ 455 sc = device_get_softc(dev); 456 if (CPUFREQ_CMP(set->freq, sc->sets[0].freq)) 457 req_state = 0; 458 else if (CPUFREQ_CMP(set->freq, sc->sets[1].freq)) 459 req_state = 1; 460 else 461 return (EINVAL); 462 463 DPRINT(dev, "requested setting %d\n", req_state); 464 465 rv = getset_state(sc, &state, GET_STATE); 466 if (state == req_state) 467 return (0); 468 469 try = 3; 470 do { 471 rv = getset_state(sc, &req_state, SET_STATE); 472 473 /* Sleep for 200 microseconds. This value is just a guess. */ 474 if (rv) 475 DELAY(200); 476 } while (rv && --try); 477 DPRINT(dev, "set_state return %d, tried %d times\n", 478 rv, 4 - try); 479 480 return (rv); 481 } 482 483 static int 484 smist_get(device_t dev, struct cf_setting *set) 485 { 486 struct smist_softc *sc; 487 uint64_t rate; 488 int state; 489 int rv; 490 491 sc = device_get_softc(dev); 492 rv = getset_state(sc, &state, GET_STATE); 493 if (rv != 0) 494 return (rv); 495 496 /* If we haven't changed settings yet, estimate the current value. */ 497 if (sc->sets[state].freq == CPUFREQ_VAL_UNKNOWN) { 498 cpu_est_clockrate(0, &rate); 499 sc->sets[state].freq = rate / 1000000; 500 DPRINT(dev, "get calibrated new rate of %d\n", 501 sc->sets[state].freq); 502 } 503 *set = sc->sets[state]; 504 505 return (0); 506 } 507 508 static int 509 smist_type(device_t dev, int *type) 510 { 511 512 if (type == NULL) 513 return (EINVAL); 514 515 *type = CPUFREQ_TYPE_ABSOLUTE; 516 return (0); 517 } 518