drivers/input/rmi4/rmi_driver.c

   1 /*
   2  * Copyright (c) 2011-2016 Synaptics Incorporated
   3  * Copyright (c) 2011 Unixphere
   4  *
   5  * This driver provides the core support for a single RMI4-based device.
   6  *
   7  * The RMI4 specification can be found here (URL split for line length):
   8  *
   9  * http://www.synaptics.com/sites/default/files/
  10  *      511-000136-01-Rev-E-RMI4-Interfacing-Guide.pdf
  11  *
  12  * This program is free software; you can redistribute it and/or modify it
  13  * under the terms of the GNU General Public License version 2 as published by
  14  * the Free Software Foundation.
  15  */
  16
  17 #include <linux/bitmap.h>
  18 #include <linux/delay.h>
  19 #include <linux/fs.h>
  20 #include <linux/irq.h>
  21 #include <linux/pm.h>
  22 #include <linux/slab.h>
  23 #include <linux/of.h>
  24 #include <uapi/linux/input.h>
  25 #include <linux/rmi.h>
  26 #include "rmi_bus.h"
  27 #include "rmi_driver.h"
  28
  29 #define HAS_NONSTANDARD_PDT_MASK 0x40
  30 #define RMI4_MAX_PAGE 0xff
  31 #define RMI4_PAGE_SIZE 0x100
  32 #define RMI4_PAGE_MASK 0xFF00
  33
  34 #define RMI_DEVICE_RESET_CMD    0x01
  35 #define DEFAULT_RESET_DELAY_MS  100
  36
  37 void rmi_free_function_list(struct rmi_device *rmi_dev)
  38 {
  39         struct rmi_function *fn, *tmp;
  40         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
  41
  42         rmi_dbg(RMI_DEBUG_CORE, &rmi_dev->dev, "Freeing function list\n");
  43
  44         /* Doing it in the reverse order so F01 will be removed last */
  45         list_for_each_entry_safe_reverse(fn, tmp,
  46                                          &data->function_list, node) {
  47                 list_del(&fn->node);
  48                 rmi_unregister_function(fn);
  49         }
  50
  51         devm_kfree(&rmi_dev->dev, data->irq_memory);
  52         data->irq_memory = NULL;
  53         data->irq_status = NULL;
  54         data->fn_irq_bits = NULL;
  55         data->current_irq_mask = NULL;
  56         data->new_irq_mask = NULL;
  57
  58         data->f01_container = NULL;
  59         data->f34_container = NULL;
  60 }
  61
  62 static int reset_one_function(struct rmi_function *fn)
  63 {
  64         struct rmi_function_handler *fh;
  65         int retval = 0;
  66
  67         if (!fn || !fn->dev.driver)
  68                 return 0;
  69
  70         fh = to_rmi_function_handler(fn->dev.driver);
  71         if (fh->reset) {
  72                 retval = fh->reset(fn);
  73                 if (retval < 0)
  74                         dev_err(&fn->dev, "Reset failed with code %d.\n",
  75                                 retval);
  76         }
  77
  78         return retval;
  79 }
  80
  81 static int configure_one_function(struct rmi_function *fn)
  82 {
  83         struct rmi_function_handler *fh;
  84         int retval = 0;
  85
  86         if (!fn || !fn->dev.driver)
  87                 return 0;
  88
  89         fh = to_rmi_function_handler(fn->dev.driver);
  90         if (fh->config) {
  91                 retval = fh->config(fn);
  92                 if (retval < 0)
  93                         dev_err(&fn->dev, "Config failed with code %d.\n",
  94                                 retval);
  95         }
  96
  97         return retval;
  98 }
  99
 100 static int rmi_driver_process_reset_requests(struct rmi_device *rmi_dev)
 101 {
 102         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 103         struct rmi_function *entry;
 104         int retval;
 105
 106         list_for_each_entry(entry, &data->function_list, node) {
 107                 retval = reset_one_function(entry);
 108                 if (retval < 0)
 109                         return retval;
 110         }
 111
 112         return 0;
 113 }
 114
 115 static int rmi_driver_process_config_requests(struct rmi_device *rmi_dev)
 116 {
 117         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 118         struct rmi_function *entry;
 119         int retval;
 120
 121         list_for_each_entry(entry, &data->function_list, node) {
 122                 retval = configure_one_function(entry);
 123                 if (retval < 0)
 124                         return retval;
 125         }
 126
 127         return 0;
 128 }
 129
 130 static void process_one_interrupt(struct rmi_driver_data *data,
 131                                   struct rmi_function *fn)
 132 {
 133         struct rmi_function_handler *fh;
 134
 135         if (!fn || !fn->dev.driver)
 136                 return;
 137
 138         fh = to_rmi_function_handler(fn->dev.driver);
 139         if (fh->attention) {
 140                 bitmap_and(data->fn_irq_bits, data->irq_status, fn->irq_mask,
 141                                 data->irq_count);
 142                 if (!bitmap_empty(data->fn_irq_bits, data->irq_count))
 143                         fh->attention(fn, data->fn_irq_bits);
 144         }
 145 }
 146
 147 static int rmi_process_interrupt_requests(struct rmi_device *rmi_dev)
 148 {
 149         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 150         struct device *dev = &rmi_dev->dev;
 151         struct rmi_function *entry;
 152         int error;
 153
 154         if (!data)
 155                 return 0;
 156
 157         if (!data->attn_data.data) {
 158                 error = rmi_read_block(rmi_dev,
 159                                 data->f01_container->fd.data_base_addr + 1,
 160                                 data->irq_status, data->num_of_irq_regs);
 161                 if (error < 0) {
 162                         dev_err(dev, "Failed to read irqs, code=%d\n", error);
 163                         return error;
 164                 }
 165         }
 166
 167         mutex_lock(&data->irq_mutex);
 168         bitmap_and(data->irq_status, data->irq_status, data->current_irq_mask,
 169                data->irq_count);
 170         /*
 171          * At this point, irq_status has all bits that are set in the
 172          * interrupt status register and are enabled.
 173          */
 174         mutex_unlock(&data->irq_mutex);
 175
 176         /*
 177          * It would be nice to be able to use irq_chip to handle these
 178          * nested IRQs.  Unfortunately, most of the current customers for
 179          * this driver are using older kernels (3.0.x) that don't support
 180          * the features required for that.  Once they've shifted to more
 181          * recent kernels (say, 3.3 and higher), this should be switched to
 182          * use irq_chip.
 183          */
 184         list_for_each_entry(entry, &data->function_list, node)
 185                 process_one_interrupt(data, entry);
 186
 187         if (data->input)
 188                 input_sync(data->input);
 189
 190         return 0;
 191 }
 192
 193 void rmi_set_attn_data(struct rmi_device *rmi_dev, unsigned long irq_status,
 194                        void *data, size_t size)
 195 {
 196         struct rmi_driver_data *drvdata = dev_get_drvdata(&rmi_dev->dev);
 197         struct rmi4_attn_data attn_data;
 198         void *fifo_data;
 199
 200         if (!drvdata->enabled)
 201                 return;
 202
 203         fifo_data = kmemdup(data, size, GFP_ATOMIC);
 204         if (!fifo_data)
 205                 return;
 206
 207         attn_data.irq_status = irq_status;
 208         attn_data.size = size;
 209         attn_data.data = fifo_data;
 210
 211         kfifo_put(&drvdata->attn_fifo, attn_data);
 212 }
 213 EXPORT_SYMBOL_GPL(rmi_set_attn_data);
 214
 215 static irqreturn_t rmi_irq_fn(int irq, void *dev_id)
 216 {
 217         struct rmi_device *rmi_dev = dev_id;
 218         struct rmi_driver_data *drvdata = dev_get_drvdata(&rmi_dev->dev);
 219         struct rmi4_attn_data attn_data = {0};
 220         int ret, count;
 221
 222         count = kfifo_get(&drvdata->attn_fifo, &attn_data);
 223         if (count) {
 224                 *(drvdata->irq_status) = attn_data.irq_status;
 225                 drvdata->attn_data = attn_data;
 226         }
 227
 228         ret = rmi_process_interrupt_requests(rmi_dev);
 229         if (ret)
 230                 rmi_dbg(RMI_DEBUG_CORE, &rmi_dev->dev,
 231                         "Failed to process interrupt request: %d\n", ret);
 232
 233         if (count) {
 234                 kfree(attn_data.data);
 235                 attn_data.data = NULL;
 236         }
 237
 238         if (!kfifo_is_empty(&drvdata->attn_fifo))
 239                 return rmi_irq_fn(irq, dev_id);
 240
 241         return IRQ_HANDLED;
 242 }
 243
 244 static int rmi_irq_init(struct rmi_device *rmi_dev)
 245 {
 246         struct rmi_device_platform_data *pdata = rmi_get_platform_data(rmi_dev);
 247         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 248         int irq_flags = irq_get_trigger_type(pdata->irq);
 249         int ret;
 250
 251         if (!irq_flags)
 252                 irq_flags = IRQF_TRIGGER_LOW;
 253
 254         ret = devm_request_threaded_irq(&rmi_dev->dev, pdata->irq, NULL,
 255                                         rmi_irq_fn, irq_flags | IRQF_ONESHOT,
 256                                         dev_driver_string(rmi_dev->xport->dev),
 257                                         rmi_dev);
 258         if (ret < 0) {
 259                 dev_err(&rmi_dev->dev, "Failed to register interrupt %d\n",
 260                         pdata->irq);
 261
 262                 return ret;
 263         }
 264
 265         data->enabled = true;
 266
 267         return 0;
 268 }
 269
 270 struct rmi_function *rmi_find_function(struct rmi_device *rmi_dev, u8 number)
 271 {
 272         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 273         struct rmi_function *entry;
 274
 275         list_for_each_entry(entry, &data->function_list, node) {
 276                 if (entry->fd.function_number == number)
 277                         return entry;
 278         }
 279
 280         return NULL;
 281 }
 282
 283 static int suspend_one_function(struct rmi_function *fn)
 284 {
 285         struct rmi_function_handler *fh;
 286         int retval = 0;
 287
 288         if (!fn || !fn->dev.driver)
 289                 return 0;
 290
 291         fh = to_rmi_function_handler(fn->dev.driver);
 292         if (fh->suspend) {
 293                 retval = fh->suspend(fn);
 294                 if (retval < 0)
 295                         dev_err(&fn->dev, "Suspend failed with code %d.\n",
 296                                 retval);
 297         }
 298
 299         return retval;
 300 }
 301
 302 static int rmi_suspend_functions(struct rmi_device *rmi_dev)
 303 {
 304         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 305         struct rmi_function *entry;
 306         int retval;
 307
 308         list_for_each_entry(entry, &data->function_list, node) {
 309                 retval = suspend_one_function(entry);
 310                 if (retval < 0)
 311                         return retval;
 312         }
 313
 314         return 0;
 315 }
 316
 317 static int resume_one_function(struct rmi_function *fn)
 318 {
 319         struct rmi_function_handler *fh;
 320         int retval = 0;
 321
 322         if (!fn || !fn->dev.driver)
 323                 return 0;
 324
 325         fh = to_rmi_function_handler(fn->dev.driver);
 326         if (fh->resume) {
 327                 retval = fh->resume(fn);
 328                 if (retval < 0)
 329                         dev_err(&fn->dev, "Resume failed with code %d.\n",
 330                                 retval);
 331         }
 332
 333         return retval;
 334 }
 335
 336 static int rmi_resume_functions(struct rmi_device *rmi_dev)
 337 {
 338         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 339         struct rmi_function *entry;
 340         int retval;
 341
 342         list_for_each_entry(entry, &data->function_list, node) {
 343                 retval = resume_one_function(entry);
 344                 if (retval < 0)
 345                         return retval;
 346         }
 347
 348         return 0;
 349 }
 350
 351 int rmi_enable_sensor(struct rmi_device *rmi_dev)
 352 {
 353         int retval = 0;
 354
 355         retval = rmi_driver_process_config_requests(rmi_dev);
 356         if (retval < 0)
 357                 return retval;
 358
 359         return rmi_process_interrupt_requests(rmi_dev);
 360 }
 361
 362 /**
 363  * rmi_driver_set_input_params - set input device id and other data.
 364  *
 365  * @rmi_dev: Pointer to an RMI device
 366  * @input: Pointer to input device
 367  *
 368  */
 369 static int rmi_driver_set_input_params(struct rmi_device *rmi_dev,
 370                                 struct input_dev *input)
 371 {
 372         input->name = SYNAPTICS_INPUT_DEVICE_NAME;
 373         input->id.vendor  = SYNAPTICS_VENDOR_ID;
 374         input->id.bustype = BUS_RMI;
 375         return 0;
 376 }
 377
 378 static void rmi_driver_set_input_name(struct rmi_device *rmi_dev,
 379                                 struct input_dev *input)
 380 {
 381         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 382         const char *device_name = rmi_f01_get_product_ID(data->f01_container);
 383         char *name;
 384
 385         name = devm_kasprintf(&rmi_dev->dev, GFP_KERNEL,
 386                               "Synaptics %s", device_name);
 387         if (!name)
 388                 return;
 389
 390         input->name = name;
 391 }
 392
 393 static int rmi_driver_set_irq_bits(struct rmi_device *rmi_dev,
 394                                    unsigned long *mask)
 395 {
 396         int error = 0;
 397         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 398         struct device *dev = &rmi_dev->dev;
 399
 400         mutex_lock(&data->irq_mutex);
 401         bitmap_or(data->new_irq_mask,
 402                   data->current_irq_mask, mask, data->irq_count);
 403
 404         error = rmi_write_block(rmi_dev,
 405                         data->f01_container->fd.control_base_addr + 1,
 406                         data->new_irq_mask, data->num_of_irq_regs);
 407         if (error < 0) {
 408                 dev_err(dev, "%s: Failed to change enabled interrupts!",
 409                                                         __func__);
 410                 goto error_unlock;
 411         }
 412         bitmap_copy(data->current_irq_mask, data->new_irq_mask,
 413                     data->num_of_irq_regs);
 414
 415 error_unlock:
 416         mutex_unlock(&data->irq_mutex);
 417         return error;
 418 }
 419
 420 static int rmi_driver_clear_irq_bits(struct rmi_device *rmi_dev,
 421                                      unsigned long *mask)
 422 {
 423         int error = 0;
 424         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 425         struct device *dev = &rmi_dev->dev;
 426
 427         mutex_lock(&data->irq_mutex);
 428         bitmap_andnot(data->new_irq_mask,
 429                   data->current_irq_mask, mask, data->irq_count);
 430
 431         error = rmi_write_block(rmi_dev,
 432                         data->f01_container->fd.control_base_addr + 1,
 433                         data->new_irq_mask, data->num_of_irq_regs);
 434         if (error < 0) {
 435                 dev_err(dev, "%s: Failed to change enabled interrupts!",
 436                                                         __func__);
 437                 goto error_unlock;
 438         }
 439         bitmap_copy(data->current_irq_mask, data->new_irq_mask,
 440                     data->num_of_irq_regs);
 441
 442 error_unlock:
 443         mutex_unlock(&data->irq_mutex);
 444         return error;
 445 }
 446
 447 static int rmi_driver_reset_handler(struct rmi_device *rmi_dev)
 448 {
 449         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 450         int error;
 451
 452         /*
 453          * Can get called before the driver is fully ready to deal with
 454          * this situation.
 455          */
 456         if (!data || !data->f01_container) {
 457                 dev_warn(&rmi_dev->dev,
 458                          "Not ready to handle reset yet!\n");
 459                 return 0;
 460         }
 461
 462         error = rmi_read_block(rmi_dev,
 463                                data->f01_container->fd.control_base_addr + 1,
 464                                data->current_irq_mask, data->num_of_irq_regs);
 465         if (error < 0) {
 466                 dev_err(&rmi_dev->dev, "%s: Failed to read current IRQ mask.\n",
 467                         __func__);
 468                 return error;
 469         }
 470
 471         error = rmi_driver_process_reset_requests(rmi_dev);
 472         if (error < 0)
 473                 return error;
 474
 475         error = rmi_driver_process_config_requests(rmi_dev);
 476         if (error < 0)
 477                 return error;
 478
 479         return 0;
 480 }
 481
 482 static int rmi_read_pdt_entry(struct rmi_device *rmi_dev,
 483                               struct pdt_entry *entry, u16 pdt_address)
 484 {
 485         u8 buf[RMI_PDT_ENTRY_SIZE];
 486         int error;
 487
 488         error = rmi_read_block(rmi_dev, pdt_address, buf, RMI_PDT_ENTRY_SIZE);
 489         if (error) {
 490                 dev_err(&rmi_dev->dev, "Read PDT entry at %#06x failed, code: %d.\n",
 491                                 pdt_address, error);
 492                 return error;
 493         }
 494
 495         entry->page_start = pdt_address & RMI4_PAGE_MASK;
 496         entry->query_base_addr = buf[0];
 497         entry->command_base_addr = buf[1];
 498         entry->control_base_addr = buf[2];
 499         entry->data_base_addr = buf[3];
 500         entry->interrupt_source_count = buf[4] & RMI_PDT_INT_SOURCE_COUNT_MASK;
 501         entry->function_version = (buf[4] & RMI_PDT_FUNCTION_VERSION_MASK) >> 5;
 502         entry->function_number = buf[5];
 503
 504         return 0;
 505 }
 506
 507 static void rmi_driver_copy_pdt_to_fd(const struct pdt_entry *pdt,
 508                                       struct rmi_function_descriptor *fd)
 509 {
 510         fd->query_base_addr = pdt->query_base_addr + pdt->page_start;
 511         fd->command_base_addr = pdt->command_base_addr + pdt->page_start;
 512         fd->control_base_addr = pdt->control_base_addr + pdt->page_start;
 513         fd->data_base_addr = pdt->data_base_addr + pdt->page_start;
 514         fd->function_number = pdt->function_number;
 515         fd->interrupt_source_count = pdt->interrupt_source_count;
 516         fd->function_version = pdt->function_version;
 517 }
 518
 519 #define RMI_SCAN_CONTINUE       0
 520 #define RMI_SCAN_DONE           1
 521
 522 static int rmi_scan_pdt_page(struct rmi_device *rmi_dev,
 523                              int page,
 524                              int *empty_pages,
 525                              void *ctx,
 526                              int (*callback)(struct rmi_device *rmi_dev,
 527                                              void *ctx,
 528                                              const struct pdt_entry *entry))
 529 {
 530         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 531         struct pdt_entry pdt_entry;
 532         u16 page_start = RMI4_PAGE_SIZE * page;
 533         u16 pdt_start = page_start + PDT_START_SCAN_LOCATION;
 534         u16 pdt_end = page_start + PDT_END_SCAN_LOCATION;
 535         u16 addr;
 536         int error;
 537         int retval;
 538
 539         for (addr = pdt_start; addr >= pdt_end; addr -= RMI_PDT_ENTRY_SIZE) {
 540                 error = rmi_read_pdt_entry(rmi_dev, &pdt_entry, addr);
 541                 if (error)
 542                         return error;
 543
 544                 if (RMI4_END_OF_PDT(pdt_entry.function_number))
 545                         break;
 546
 547                 retval = callback(rmi_dev, ctx, &pdt_entry);
 548                 if (retval != RMI_SCAN_CONTINUE)
 549                         return retval;
 550         }
 551
 552         /*
 553          * Count number of empty PDT pages. If a gap of two pages
 554          * or more is found, stop scanning.
 555          */
 556         if (addr == pdt_start)
 557                 ++*empty_pages;
 558         else
 559                 *empty_pages = 0;
 560
 561         return (data->bootloader_mode || *empty_pages >= 2) ?
 562                                         RMI_SCAN_DONE : RMI_SCAN_CONTINUE;
 563 }
 564
 565 int rmi_scan_pdt(struct rmi_device *rmi_dev, void *ctx,
 566                  int (*callback)(struct rmi_device *rmi_dev,
 567                  void *ctx, const struct pdt_entry *entry))
 568 {
 569         int page;
 570         int empty_pages = 0;
 571         int retval = RMI_SCAN_DONE;
 572
 573         for (page = 0; page <= RMI4_MAX_PAGE; page++) {
 574                 retval = rmi_scan_pdt_page(rmi_dev, page, &empty_pages,
 575                                            ctx, callback);
 576                 if (retval != RMI_SCAN_CONTINUE)
 577                         break;
 578         }
 579
 580         return retval < 0 ? retval : 0;
 581 }
 582
 583 int rmi_read_register_desc(struct rmi_device *d, u16 addr,
 584                                 struct rmi_register_descriptor *rdesc)
 585 {
 586         int ret;
 587         u8 size_presence_reg;
 588         u8 buf[35];
 589         int presense_offset = 1;
 590         u8 *struct_buf;
 591         int reg;
 592         int offset = 0;
 593         int map_offset = 0;
 594         int i;
 595         int b;
 596
 597         /*
 598          * The first register of the register descriptor is the size of
 599          * the register descriptor's presense register.
 600          */
 601         ret = rmi_read(d, addr, &size_presence_reg);
 602         if (ret)
 603                 return ret;
 604         ++addr;
 605
 606         if (size_presence_reg < 0 || size_presence_reg > 35)
 607                 return -EIO;
 608
 609         memset(buf, 0, sizeof(buf));
 610
 611         /*
 612          * The presence register contains the size of the register structure
 613          * and a bitmap which identified which packet registers are present
 614          * for this particular register type (ie query, control, or data).
 615          */
 616         ret = rmi_read_block(d, addr, buf, size_presence_reg);
 617         if (ret)
 618                 return ret;
 619         ++addr;
 620
 621         if (buf[0] == 0) {
 622                 presense_offset = 3;
 623                 rdesc->struct_size = buf[1] | (buf[2] << 8);
 624         } else {
 625                 rdesc->struct_size = buf[0];
 626         }
 627
 628         for (i = presense_offset; i < size_presence_reg; i++) {
 629                 for (b = 0; b < 8; b++) {
 630                         if (buf[i] & (0x1 << b))
 631                                 bitmap_set(rdesc->presense_map, map_offset, 1);
 632                         ++map_offset;
 633                 }
 634         }
 635
 636         rdesc->num_registers = bitmap_weight(rdesc->presense_map,
 637                                                 RMI_REG_DESC_PRESENSE_BITS);
 638
 639         rdesc->registers = devm_kzalloc(&d->dev, rdesc->num_registers *
 640                                 sizeof(struct rmi_register_desc_item),
 641                                 GFP_KERNEL);
 642         if (!rdesc->registers)
 643                 return -ENOMEM;
 644
 645         /*
 646          * Allocate a temporary buffer to hold the register structure.
 647          * I'm not using devm_kzalloc here since it will not be retained
 648          * after exiting this function
 649          */
 650         struct_buf = kzalloc(rdesc->struct_size, GFP_KERNEL);
 651         if (!struct_buf)
 652                 return -ENOMEM;
 653
 654         /*
 655          * The register structure contains information about every packet
 656          * register of this type. This includes the size of the packet
 657          * register and a bitmap of all subpackets contained in the packet
 658          * register.
 659          */
 660         ret = rmi_read_block(d, addr, struct_buf, rdesc->struct_size);
 661         if (ret)
 662                 goto free_struct_buff;
 663
 664         reg = find_first_bit(rdesc->presense_map, RMI_REG_DESC_PRESENSE_BITS);
 665         for (i = 0; i < rdesc->num_registers; i++) {
 666                 struct rmi_register_desc_item *item = &rdesc->registers[i];
 667                 int reg_size = struct_buf[offset];
 668
 669                 ++offset;
 670                 if (reg_size == 0) {
 671                         reg_size = struct_buf[offset] |
 672                                         (struct_buf[offset + 1] << 8);
 673                         offset += 2;
 674                 }
 675
 676                 if (reg_size == 0) {
 677                         reg_size = struct_buf[offset] |
 678                                         (struct_buf[offset + 1] << 8) |
 679                                         (struct_buf[offset + 2] << 16) |
 680                                         (struct_buf[offset + 3] << 24);
 681                         offset += 4;
 682                 }
 683
 684                 item->reg = reg;
 685                 item->reg_size = reg_size;
 686
 687                 map_offset = 0;
 688
 689                 do {
 690                         for (b = 0; b < 7; b++) {
 691                                 if (struct_buf[offset] & (0x1 << b))
 692                                         bitmap_set(item->subpacket_map,
 693                                                 map_offset, 1);
 694                                 ++map_offset;
 695                         }
 696                 } while (struct_buf[offset++] & 0x80);
 697
 698                 item->num_subpackets = bitmap_weight(item->subpacket_map,
 699                                                 RMI_REG_DESC_SUBPACKET_BITS);
 700
 701                 rmi_dbg(RMI_DEBUG_CORE, &d->dev,
 702                         "%s: reg: %d reg size: %ld subpackets: %d\n", __func__,
 703                         item->reg, item->reg_size, item->num_subpackets);
 704
 705                 reg = find_next_bit(rdesc->presense_map,
 706                                 RMI_REG_DESC_PRESENSE_BITS, reg + 1);
 707         }
 708
 709 free_struct_buff:
 710         kfree(struct_buf);
 711         return ret;
 712 }
 713
 714 const struct rmi_register_desc_item *rmi_get_register_desc_item(
 715                                 struct rmi_register_descriptor *rdesc, u16 reg)
 716 {
 717         const struct rmi_register_desc_item *item;
 718         int i;
 719
 720         for (i = 0; i < rdesc->num_registers; i++) {
 721                 item = &rdesc->registers[i];
 722                 if (item->reg == reg)
 723                         return item;
 724         }
 725
 726         return NULL;
 727 }
 728
 729 size_t rmi_register_desc_calc_size(struct rmi_register_descriptor *rdesc)
 730 {
 731         const struct rmi_register_desc_item *item;
 732         int i;
 733         size_t size = 0;
 734
 735         for (i = 0; i < rdesc->num_registers; i++) {
 736                 item = &rdesc->registers[i];
 737                 size += item->reg_size;
 738         }
 739         return size;
 740 }
 741
 742 /* Compute the register offset relative to the base address */
 743 int rmi_register_desc_calc_reg_offset(
 744                 struct rmi_register_descriptor *rdesc, u16 reg)
 745 {
 746         const struct rmi_register_desc_item *item;
 747         int offset = 0;
 748         int i;
 749
 750         for (i = 0; i < rdesc->num_registers; i++) {
 751                 item = &rdesc->registers[i];
 752                 if (item->reg == reg)
 753                         return offset;
 754                 ++offset;
 755         }
 756         return -1;
 757 }
 758
 759 bool rmi_register_desc_has_subpacket(const struct rmi_register_desc_item *item,
 760         u8 subpacket)
 761 {
 762         return find_next_bit(item->subpacket_map, RMI_REG_DESC_PRESENSE_BITS,
 763                                 subpacket) == subpacket;
 764 }
 765
 766 static int rmi_check_bootloader_mode(struct rmi_device *rmi_dev,
 767                                      const struct pdt_entry *pdt)
 768 {
 769         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 770         int ret;
 771         u8 status;
 772
 773         if (pdt->function_number == 0x34 && pdt->function_version > 1) {
 774                 ret = rmi_read(rmi_dev, pdt->data_base_addr, &status);
 775                 if (ret) {
 776                         dev_err(&rmi_dev->dev,
 777                                 "Failed to read F34 status: %d.\n", ret);
 778                         return ret;
 779                 }
 780
 781                 if (status & BIT(7))
 782                         data->bootloader_mode = true;
 783         } else if (pdt->function_number == 0x01) {
 784                 ret = rmi_read(rmi_dev, pdt->data_base_addr, &status);
 785                 if (ret) {
 786                         dev_err(&rmi_dev->dev,
 787                                 "Failed to read F01 status: %d.\n", ret);
 788                         return ret;
 789                 }
 790
 791                 if (status & BIT(6))
 792                         data->bootloader_mode = true;
 793         }
 794
 795         return 0;
 796 }
 797
 798 static int rmi_count_irqs(struct rmi_device *rmi_dev,
 799                          void *ctx, const struct pdt_entry *pdt)
 800 {
 801         int *irq_count = ctx;
 802         int ret;
 803
 804         *irq_count += pdt->interrupt_source_count;
 805
 806         ret = rmi_check_bootloader_mode(rmi_dev, pdt);
 807         if (ret < 0)
 808                 return ret;
 809
 810         return RMI_SCAN_CONTINUE;
 811 }
 812
 813 int rmi_initial_reset(struct rmi_device *rmi_dev, void *ctx,
 814                       const struct pdt_entry *pdt)
 815 {
 816         int error;
 817
 818         if (pdt->function_number == 0x01) {
 819                 u16 cmd_addr = pdt->page_start + pdt->command_base_addr;
 820                 u8 cmd_buf = RMI_DEVICE_RESET_CMD;
 821                 const struct rmi_device_platform_data *pdata =
 822                                 rmi_get_platform_data(rmi_dev);
 823
 824                 if (rmi_dev->xport->ops->reset) {
 825                         error = rmi_dev->xport->ops->reset(rmi_dev->xport,
 826                                                                 cmd_addr);
 827                         if (error)
 828                                 return error;
 829
 830                         return RMI_SCAN_DONE;
 831                 }
 832
 833                 rmi_dbg(RMI_DEBUG_CORE, &rmi_dev->dev, "Sending reset\n");
 834                 error = rmi_write_block(rmi_dev, cmd_addr, &cmd_buf, 1);
 835                 if (error) {
 836                         dev_err(&rmi_dev->dev,
 837                                 "Initial reset failed. Code = %d.\n", error);
 838                         return error;
 839                 }
 840
 841                 mdelay(pdata->reset_delay_ms ?: DEFAULT_RESET_DELAY_MS);
 842
 843                 return RMI_SCAN_DONE;
 844         }
 845
 846         /* F01 should always be on page 0. If we don't find it there, fail. */
 847         return pdt->page_start == 0 ? RMI_SCAN_CONTINUE : -ENODEV;
 848 }
 849
 850 static int rmi_create_function(struct rmi_device *rmi_dev,
 851                                void *ctx, const struct pdt_entry *pdt)
 852 {
 853         struct device *dev = &rmi_dev->dev;
 854         struct rmi_driver_data *data = dev_get_drvdata(dev);
 855         int *current_irq_count = ctx;
 856         struct rmi_function *fn;
 857         int i;
 858         int error;
 859
 860         rmi_dbg(RMI_DEBUG_CORE, dev, "Initializing F%02X.\n",
 861                         pdt->function_number);
 862
 863         fn = kzalloc(sizeof(struct rmi_function) +
 864                         BITS_TO_LONGS(data->irq_count) * sizeof(unsigned long),
 865                      GFP_KERNEL);
 866         if (!fn) {
 867                 dev_err(dev, "Failed to allocate memory for F%02X\n",
 868                         pdt->function_number);
 869                 return -ENOMEM;
 870         }
 871
 872         INIT_LIST_HEAD(&fn->node);
 873         rmi_driver_copy_pdt_to_fd(pdt, &fn->fd);
 874
 875         fn->rmi_dev = rmi_dev;
 876
 877         fn->num_of_irqs = pdt->interrupt_source_count;
 878         fn->irq_pos = *current_irq_count;
 879         *current_irq_count += fn->num_of_irqs;
 880
 881         for (i = 0; i < fn->num_of_irqs; i++)
 882                 set_bit(fn->irq_pos + i, fn->irq_mask);
 883
 884         error = rmi_register_function(fn);
 885         if (error)
 886                 goto err_put_fn;
 887
 888         if (pdt->function_number == 0x01)
 889                 data->f01_container = fn;
 890         else if (pdt->function_number == 0x34)
 891                 data->f34_container = fn;
 892
 893         list_add_tail(&fn->node, &data->function_list);
 894
 895         return RMI_SCAN_CONTINUE;
 896
 897 err_put_fn:
 898         put_device(&fn->dev);
 899         return error;
 900 }
 901
 902 void rmi_enable_irq(struct rmi_device *rmi_dev, bool clear_wake)
 903 {
 904         struct rmi_device_platform_data *pdata = rmi_get_platform_data(rmi_dev);
 905         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 906         int irq = pdata->irq;
 907         int irq_flags;
 908         int retval;
 909
 910         mutex_lock(&data->enabled_mutex);
 911
 912         if (data->enabled)
 913                 goto out;
 914
 915         enable_irq(irq);
 916         data->enabled = true;
 917         if (clear_wake && device_may_wakeup(rmi_dev->xport->dev)) {
 918                 retval = disable_irq_wake(irq);
 919                 if (retval)
 920                         dev_warn(&rmi_dev->dev,
 921                                  "Failed to disable irq for wake: %d\n",
 922                                  retval);
 923         }
 924
 925         /*
 926          * Call rmi_process_interrupt_requests() after enabling irq,
 927          * otherwise we may lose interrupt on edge-triggered systems.
 928          */
 929         irq_flags = irq_get_trigger_type(pdata->irq);
 930         if (irq_flags & IRQ_TYPE_EDGE_BOTH)
 931                 rmi_process_interrupt_requests(rmi_dev);
 932
 933 out:
 934         mutex_unlock(&data->enabled_mutex);
 935 }
 936
 937 void rmi_disable_irq(struct rmi_device *rmi_dev, bool enable_wake)
 938 {
 939         struct rmi_device_platform_data *pdata = rmi_get_platform_data(rmi_dev);
 940         struct rmi_driver_data *data = dev_get_drvdata(&rmi_dev->dev);
 941         struct rmi4_attn_data attn_data = {0};
 942         int irq = pdata->irq;
 943         int retval, count;
 944
 945         mutex_lock(&data->enabled_mutex);
 946
 947         if (!data->enabled)
 948                 goto out;
 949
 950         data->enabled = false;
 951         disable_irq(irq);
 952         if (enable_wake && device_may_wakeup(rmi_dev->xport->dev)) {
 953                 retval = enable_irq_wake(irq);
 954                 if (retval)
 955                         dev_warn(&rmi_dev->dev,
 956                                  "Failed to enable irq for wake: %d\n",
 957                                  retval);
 958         }
 959
 960         /* make sure the fifo is clean */
 961         while (!kfifo_is_empty(&data->attn_fifo)) {
 962                 count = kfifo_get(&data->attn_fifo, &attn_data);
 963                 if (count)
 964                         kfree(attn_data.data);
 965         }
 966
 967 out:
 968         mutex_unlock(&data->enabled_mutex);
 969 }
 970
 971 int rmi_driver_suspend(struct rmi_device *rmi_dev, bool enable_wake)
 972 {
 973         int retval;
 974
 975         retval = rmi_suspend_functions(rmi_dev);
 976         if (retval)
 977                 dev_warn(&rmi_dev->dev, "Failed to suspend functions: %d\n",
 978                         retval);
 979
 980         rmi_disable_irq(rmi_dev, enable_wake);
 981         return retval;
 982 }
 983 EXPORT_SYMBOL_GPL(rmi_driver_suspend);
 984
 985 int rmi_driver_resume(struct rmi_device *rmi_dev, bool clear_wake)
 986 {
 987         int retval;
 988
 989         rmi_enable_irq(rmi_dev, clear_wake);
 990
 991         retval = rmi_resume_functions(rmi_dev);
 992         if (retval)
 993                 dev_warn(&rmi_dev->dev, "Failed to suspend functions: %d\n",
 994                         retval);
 995
 996         return retval;
 997 }
 998 EXPORT_SYMBOL_GPL(rmi_driver_resume);
 999
1000 static int rmi_driver_remove(struct device *dev)
1001 {
1002         struct rmi_device *rmi_dev = to_rmi_device(dev);
1003
1004         rmi_disable_irq(rmi_dev, false);
1005
1006         rmi_f34_remove_sysfs(rmi_dev);
1007         rmi_free_function_list(rmi_dev);
1008
1009         return 0;
1010 }
1011
1012 #ifdef CONFIG_OF
1013 static int rmi_driver_of_probe(struct device *dev,
1014                                 struct rmi_device_platform_data *pdata)
1015 {
1016         int retval;
1017
1018         retval = rmi_of_property_read_u32(dev, &pdata->reset_delay_ms,
1019                                         "syna,reset-delay-ms", 1);
1020         if (retval)
1021                 return retval;
1022
1023         return 0;
1024 }
1025 #else
1026 static inline int rmi_driver_of_probe(struct device *dev,
1027                                         struct rmi_device_platform_data *pdata)
1028 {
1029         return -ENODEV;
1030 }
1031 #endif
1032
1033 int rmi_probe_interrupts(struct rmi_driver_data *data)
1034 {
1035         struct rmi_device *rmi_dev = data->rmi_dev;
1036         struct device *dev = &rmi_dev->dev;
1037         int irq_count;
1038         size_t size;
1039         int retval;
1040
1041         /*
1042          * We need to count the IRQs and allocate their storage before scanning
1043          * the PDT and creating the function entries, because adding a new
1044          * function can trigger events that result in the IRQ related storage
1045          * being accessed.
1046          */
1047         rmi_dbg(RMI_DEBUG_CORE, dev, "%s: Counting IRQs.\n", __func__);
1048         irq_count = 0;
1049         data->bootloader_mode = false;
1050
1051         retval = rmi_scan_pdt(rmi_dev, &irq_count, rmi_count_irqs);
1052         if (retval < 0) {
1053                 dev_err(dev, "IRQ counting failed with code %d.\n", retval);
1054                 return retval;
1055         }
1056
1057         if (data->bootloader_mode)
1058                 dev_warn(dev, "Device in bootloader mode.\n");
1059
1060         data->irq_count = irq_count;
1061         data->num_of_irq_regs = (data->irq_count + 7) / 8;
1062
1063         size = BITS_TO_LONGS(data->irq_count) * sizeof(unsigned long);
1064         data->irq_memory = devm_kzalloc(dev, size * 4, GFP_KERNEL);
1065         if (!data->irq_memory) {
1066                 dev_err(dev, "Failed to allocate memory for irq masks.\n");
1067                 return -ENOMEM;
1068         }
1069
1070         data->irq_status        = data->irq_memory + size * 0;
1071         data->fn_irq_bits       = data->irq_memory + size * 1;
1072         data->current_irq_mask  = data->irq_memory + size * 2;
1073         data->new_irq_mask      = data->irq_memory + size * 3;
1074
1075         return retval;
1076 }
1077
1078 int rmi_init_functions(struct rmi_driver_data *data)
1079 {
1080         struct rmi_device *rmi_dev = data->rmi_dev;
1081         struct device *dev = &rmi_dev->dev;
1082         int irq_count;
1083         int retval;
1084
1085         irq_count = 0;
1086         rmi_dbg(RMI_DEBUG_CORE, dev, "%s: Creating functions.\n", __func__);
1087         retval = rmi_scan_pdt(rmi_dev, &irq_count, rmi_create_function);
1088         if (retval < 0) {
1089                 dev_err(dev, "Function creation failed with code %d.\n",
1090                         retval);
1091                 goto err_destroy_functions;
1092         }
1093
1094         if (!data->f01_container) {
1095                 dev_err(dev, "Missing F01 container!\n");
1096                 retval = -EINVAL;
1097                 goto err_destroy_functions;
1098         }
1099
1100         retval = rmi_read_block(rmi_dev,
1101                                 data->f01_container->fd.control_base_addr + 1,
1102                                 data->current_irq_mask, data->num_of_irq_regs);
1103         if (retval < 0) {
1104                 dev_err(dev, "%s: Failed to read current IRQ mask.\n",
1105                         __func__);
1106                 goto err_destroy_functions;
1107         }
1108
1109         return 0;
1110
1111 err_destroy_functions:
1112         rmi_free_function_list(rmi_dev);
1113         return retval;
1114 }
1115
1116 static int rmi_driver_probe(struct device *dev)
1117 {
1118         struct rmi_driver *rmi_driver;
1119         struct rmi_driver_data *data;
1120         struct rmi_device_platform_data *pdata;
1121         struct rmi_device *rmi_dev;
1122         int retval;
1123
1124         rmi_dbg(RMI_DEBUG_CORE, dev, "%s: Starting probe.\n",
1125                         __func__);
1126
1127         if (!rmi_is_physical_device(dev)) {
1128                 rmi_dbg(RMI_DEBUG_CORE, dev, "Not a physical device.\n");
1129                 return -ENODEV;
1130         }
1131
1132         rmi_dev = to_rmi_device(dev);
1133         rmi_driver = to_rmi_driver(dev->driver);
1134         rmi_dev->driver = rmi_driver;
1135
1136         pdata = rmi_get_platform_data(rmi_dev);
1137
1138         if (rmi_dev->xport->dev->of_node) {
1139                 retval = rmi_driver_of_probe(rmi_dev->xport->dev, pdata);
1140                 if (retval)
1141                         return retval;
1142         }
1143
1144         data = devm_kzalloc(dev, sizeof(struct rmi_driver_data), GFP_KERNEL);
1145         if (!data)
1146                 return -ENOMEM;
1147
1148         INIT_LIST_HEAD(&data->function_list);
1149         data->rmi_dev = rmi_dev;
1150         dev_set_drvdata(&rmi_dev->dev, data);
1151
1152         /*
1153          * Right before a warm boot, the sensor might be in some unusual state,
1154          * such as F54 diagnostics, or F34 bootloader mode after a firmware
1155          * or configuration update.  In order to clear the sensor to a known
1156          * state and/or apply any updates, we issue a initial reset to clear any
1157          * previous settings and force it into normal operation.
1158          *
1159          * We have to do this before actually building the PDT because
1160          * the reflash updates (if any) might cause various registers to move
1161          * around.
1162          *
1163          * For a number of reasons, this initial reset may fail to return
1164          * within the specified time, but we'll still be able to bring up the
1165          * driver normally after that failure.  This occurs most commonly in
1166          * a cold boot situation (where then firmware takes longer to come up
1167          * than from a warm boot) and the reset_delay_ms in the platform data
1168          * has been set too short to accommodate that.  Since the sensor will
1169          * eventually come up and be usable, we don't want to just fail here
1170          * and leave the customer's device unusable.  So we warn them, and
1171          * continue processing.
1172          */
1173         retval = rmi_scan_pdt(rmi_dev, NULL, rmi_initial_reset);
1174         if (retval < 0)
1175                 dev_warn(dev, "RMI initial reset failed! Continuing in spite of this.\n");
1176
1177         retval = rmi_read(rmi_dev, PDT_PROPERTIES_LOCATION, &data->pdt_props);
1178         if (retval < 0) {
1179                 /*
1180                  * we'll print out a warning and continue since
1181                  * failure to get the PDT properties is not a cause to fail
1182                  */
1183                 dev_warn(dev, "Could not read PDT properties from %#06x (code %d). Assuming 0x00.\n",
1184                          PDT_PROPERTIES_LOCATION, retval);
1185         }
1186
1187         mutex_init(&data->irq_mutex);
1188         mutex_init(&data->enabled_mutex);
1189
1190         retval = rmi_probe_interrupts(data);
1191         if (retval)
1192                 goto err;
1193
1194         if (rmi_dev->xport->input) {
1195                 /*
1196                  * The transport driver already has an input device.
1197                  * In some cases it is preferable to reuse the transport
1198                  * devices input device instead of creating a new one here.
1199                  * One example is some HID touchpads report "pass-through"
1200                  * button events are not reported by rmi registers.
1201                  */
1202                 data->input = rmi_dev->xport->input;
1203         } else {
1204                 data->input = devm_input_allocate_device(dev);
1205                 if (!data->input) {
1206                         dev_err(dev, "%s: Failed to allocate input device.\n",
1207                                 __func__);
1208                         retval = -ENOMEM;
1209                         goto err;
1210                 }
1211                 rmi_driver_set_input_params(rmi_dev, data->input);
1212                 data->input->phys = devm_kasprintf(dev, GFP_KERNEL,
1213                                                 "%s/input0", dev_name(dev));
1214         }
1215
1216         retval = rmi_init_functions(data);
1217         if (retval)
1218                 goto err;
1219
1220         retval = rmi_f34_create_sysfs(rmi_dev);
1221         if (retval)
1222                 goto err;
1223
1224         if (data->input) {
1225                 rmi_driver_set_input_name(rmi_dev, data->input);
1226                 if (!rmi_dev->xport->input) {
1227                         if (input_register_device(data->input)) {
1228                                 dev_err(dev, "%s: Failed to register input device.\n",
1229                                         __func__);
1230                                 goto err_destroy_functions;
1231                         }
1232                 }
1233         }
1234
1235         retval = rmi_irq_init(rmi_dev);
1236         if (retval < 0)
1237                 goto err_destroy_functions;
1238
1239         if (data->f01_container->dev.driver) {
1240                 /* Driver already bound, so enable ATTN now. */
1241                 retval = rmi_enable_sensor(rmi_dev);
1242                 if (retval)
1243                         goto err_disable_irq;
1244         }
1245
1246         return 0;
1247
1248 err_disable_irq:
1249         rmi_disable_irq(rmi_dev, false);
1250 err_destroy_functions:
1251         rmi_free_function_list(rmi_dev);
1252 err:
1253         return retval;
1254 }
1255
1256 static struct rmi_driver rmi_physical_driver = {
1257         .driver = {
1258                 .owner  = THIS_MODULE,
1259                 .name   = "rmi4_physical",
1260                 .bus    = &rmi_bus_type,
1261                 .probe = rmi_driver_probe,
1262                 .remove = rmi_driver_remove,
1263         },
1264         .reset_handler = rmi_driver_reset_handler,
1265         .clear_irq_bits = rmi_driver_clear_irq_bits,
1266         .set_irq_bits = rmi_driver_set_irq_bits,
1267         .set_input_params = rmi_driver_set_input_params,
1268 };
1269
1270 bool rmi_is_physical_driver(struct device_driver *drv)
1271 {
1272         return drv == &rmi_physical_driver.driver;
1273 }
1274
1275 int __init rmi_register_physical_driver(void)
1276 {
1277         int error;
1278
1279         error = driver_register(&rmi_physical_driver.driver);
1280         if (error) {
1281                 pr_err("%s: driver register failed, code=%d.\n", __func__,
1282                        error);
1283                 return error;
1284         }
1285
1286         return 0;
1287 }
1288
1289 void __exit rmi_unregister_physical_driver(void)
1290 {
1291         driver_unregister(&rmi_physical_driver.driver);
1292 }