| xj | b04a402 | 2021-11-25 15:01:52 +0800 | [diff] [blame] | 1 | /* | 
|  | 2 | *  Texas Instruments' Bluetooth HCILL UART protocol | 
|  | 3 | * | 
|  | 4 | *  HCILL (HCI Low Level) is a Texas Instruments' power management | 
|  | 5 | *  protocol extension to H4. | 
|  | 6 | * | 
|  | 7 | *  Copyright (C) 2007 Texas Instruments, Inc. | 
|  | 8 | * | 
|  | 9 | *  Written by Ohad Ben-Cohen <ohad@bencohen.org> | 
|  | 10 | * | 
|  | 11 | *  Acknowledgements: | 
|  | 12 | *  This file is based on hci_h4.c, which was written | 
|  | 13 | *  by Maxim Krasnyansky and Marcel Holtmann. | 
|  | 14 | * | 
|  | 15 | *  This program is free software; you can redistribute it and/or modify | 
|  | 16 | *  it under the terms of the GNU General Public License version 2 | 
|  | 17 | *  as published by the Free Software Foundation | 
|  | 18 | * | 
|  | 19 | *  This program is distributed in the hope that it will be useful, | 
|  | 20 | *  but WITHOUT ANY WARRANTY; without even the implied warranty of | 
|  | 21 | *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the | 
|  | 22 | *  GNU General Public License for more details. | 
|  | 23 | * | 
|  | 24 | *  You should have received a copy of the GNU General Public License | 
|  | 25 | *  along with this program; if not, write to the Free Software | 
|  | 26 | *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA | 
|  | 27 | * | 
|  | 28 | */ | 
|  | 29 |  | 
|  | 30 | #include <linux/module.h> | 
|  | 31 | #include <linux/kernel.h> | 
|  | 32 |  | 
|  | 33 | #include <linux/init.h> | 
|  | 34 | #include <linux/sched.h> | 
|  | 35 | #include <linux/types.h> | 
|  | 36 | #include <linux/fcntl.h> | 
|  | 37 | #include <linux/firmware.h> | 
|  | 38 | #include <linux/interrupt.h> | 
|  | 39 | #include <linux/ptrace.h> | 
|  | 40 | #include <linux/poll.h> | 
|  | 41 |  | 
|  | 42 | #include <linux/slab.h> | 
|  | 43 | #include <linux/errno.h> | 
|  | 44 | #include <linux/string.h> | 
|  | 45 | #include <linux/signal.h> | 
|  | 46 | #include <linux/ioctl.h> | 
|  | 47 | #include <linux/of.h> | 
|  | 48 | #include <linux/serdev.h> | 
|  | 49 | #include <linux/skbuff.h> | 
|  | 50 | #include <linux/ti_wilink_st.h> | 
|  | 51 | #include <linux/clk.h> | 
|  | 52 |  | 
|  | 53 | #include <net/bluetooth/bluetooth.h> | 
|  | 54 | #include <net/bluetooth/hci_core.h> | 
|  | 55 | #include <linux/gpio/consumer.h> | 
|  | 56 | #include <linux/nvmem-consumer.h> | 
|  | 57 |  | 
|  | 58 | #include "hci_uart.h" | 
|  | 59 |  | 
|  | 60 | /* Vendor-specific HCI commands */ | 
|  | 61 | #define HCI_VS_WRITE_BD_ADDR			0xfc06 | 
|  | 62 | #define HCI_VS_UPDATE_UART_HCI_BAUDRATE		0xff36 | 
|  | 63 |  | 
|  | 64 | /* HCILL commands */ | 
|  | 65 | #define HCILL_GO_TO_SLEEP_IND	0x30 | 
|  | 66 | #define HCILL_GO_TO_SLEEP_ACK	0x31 | 
|  | 67 | #define HCILL_WAKE_UP_IND	0x32 | 
|  | 68 | #define HCILL_WAKE_UP_ACK	0x33 | 
|  | 69 |  | 
|  | 70 | /* HCILL states */ | 
|  | 71 | enum hcill_states_e { | 
|  | 72 | HCILL_ASLEEP, | 
|  | 73 | HCILL_ASLEEP_TO_AWAKE, | 
|  | 74 | HCILL_AWAKE, | 
|  | 75 | HCILL_AWAKE_TO_ASLEEP | 
|  | 76 | }; | 
|  | 77 |  | 
|  | 78 | struct ll_device { | 
|  | 79 | struct hci_uart hu; | 
|  | 80 | struct serdev_device *serdev; | 
|  | 81 | struct gpio_desc *enable_gpio; | 
|  | 82 | struct clk *ext_clk; | 
|  | 83 | bdaddr_t bdaddr; | 
|  | 84 | }; | 
|  | 85 |  | 
|  | 86 | struct ll_struct { | 
|  | 87 | struct sk_buff *rx_skb; | 
|  | 88 | struct sk_buff_head txq; | 
|  | 89 | spinlock_t hcill_lock;		/* HCILL state lock	*/ | 
|  | 90 | unsigned long hcill_state;	/* HCILL power state	*/ | 
|  | 91 | struct sk_buff_head tx_wait_q;	/* HCILL wait queue	*/ | 
|  | 92 | }; | 
|  | 93 |  | 
|  | 94 | /* | 
|  | 95 | * Builds and sends an HCILL command packet. | 
|  | 96 | * These are very simple packets with only 1 cmd byte | 
|  | 97 | */ | 
|  | 98 | static int send_hcill_cmd(u8 cmd, struct hci_uart *hu) | 
|  | 99 | { | 
|  | 100 | int err = 0; | 
|  | 101 | struct sk_buff *skb = NULL; | 
|  | 102 | struct ll_struct *ll = hu->priv; | 
|  | 103 |  | 
|  | 104 | BT_DBG("hu %p cmd 0x%x", hu, cmd); | 
|  | 105 |  | 
|  | 106 | /* allocate packet */ | 
|  | 107 | skb = bt_skb_alloc(1, GFP_ATOMIC); | 
|  | 108 | if (!skb) { | 
|  | 109 | BT_ERR("cannot allocate memory for HCILL packet"); | 
|  | 110 | err = -ENOMEM; | 
|  | 111 | goto out; | 
|  | 112 | } | 
|  | 113 |  | 
|  | 114 | /* prepare packet */ | 
|  | 115 | skb_put_u8(skb, cmd); | 
|  | 116 |  | 
|  | 117 | /* send packet */ | 
|  | 118 | skb_queue_tail(&ll->txq, skb); | 
|  | 119 | out: | 
|  | 120 | return err; | 
|  | 121 | } | 
|  | 122 |  | 
|  | 123 | /* Initialize protocol */ | 
|  | 124 | static int ll_open(struct hci_uart *hu) | 
|  | 125 | { | 
|  | 126 | struct ll_struct *ll; | 
|  | 127 |  | 
|  | 128 | BT_DBG("hu %p", hu); | 
|  | 129 |  | 
|  | 130 | ll = kzalloc(sizeof(*ll), GFP_KERNEL); | 
|  | 131 | if (!ll) | 
|  | 132 | return -ENOMEM; | 
|  | 133 |  | 
|  | 134 | skb_queue_head_init(&ll->txq); | 
|  | 135 | skb_queue_head_init(&ll->tx_wait_q); | 
|  | 136 | spin_lock_init(&ll->hcill_lock); | 
|  | 137 |  | 
|  | 138 | ll->hcill_state = HCILL_AWAKE; | 
|  | 139 |  | 
|  | 140 | hu->priv = ll; | 
|  | 141 |  | 
|  | 142 | if (hu->serdev) { | 
|  | 143 | struct ll_device *lldev = serdev_device_get_drvdata(hu->serdev); | 
|  | 144 | if (!IS_ERR(lldev->ext_clk)) | 
|  | 145 | clk_prepare_enable(lldev->ext_clk); | 
|  | 146 | } | 
|  | 147 |  | 
|  | 148 | return 0; | 
|  | 149 | } | 
|  | 150 |  | 
|  | 151 | /* Flush protocol data */ | 
|  | 152 | static int ll_flush(struct hci_uart *hu) | 
|  | 153 | { | 
|  | 154 | struct ll_struct *ll = hu->priv; | 
|  | 155 |  | 
|  | 156 | BT_DBG("hu %p", hu); | 
|  | 157 |  | 
|  | 158 | skb_queue_purge(&ll->tx_wait_q); | 
|  | 159 | skb_queue_purge(&ll->txq); | 
|  | 160 |  | 
|  | 161 | return 0; | 
|  | 162 | } | 
|  | 163 |  | 
|  | 164 | /* Close protocol */ | 
|  | 165 | static int ll_close(struct hci_uart *hu) | 
|  | 166 | { | 
|  | 167 | struct ll_struct *ll = hu->priv; | 
|  | 168 |  | 
|  | 169 | BT_DBG("hu %p", hu); | 
|  | 170 |  | 
|  | 171 | skb_queue_purge(&ll->tx_wait_q); | 
|  | 172 | skb_queue_purge(&ll->txq); | 
|  | 173 |  | 
|  | 174 | kfree_skb(ll->rx_skb); | 
|  | 175 |  | 
|  | 176 | if (hu->serdev) { | 
|  | 177 | struct ll_device *lldev = serdev_device_get_drvdata(hu->serdev); | 
|  | 178 | gpiod_set_value_cansleep(lldev->enable_gpio, 0); | 
|  | 179 |  | 
|  | 180 | clk_disable_unprepare(lldev->ext_clk); | 
|  | 181 | } | 
|  | 182 |  | 
|  | 183 | hu->priv = NULL; | 
|  | 184 |  | 
|  | 185 | kfree(ll); | 
|  | 186 |  | 
|  | 187 | return 0; | 
|  | 188 | } | 
|  | 189 |  | 
|  | 190 | /* | 
|  | 191 | * internal function, which does common work of the device wake up process: | 
|  | 192 | * 1. places all pending packets (waiting in tx_wait_q list) in txq list. | 
|  | 193 | * 2. changes internal state to HCILL_AWAKE. | 
|  | 194 | * Note: assumes that hcill_lock spinlock is taken, | 
|  | 195 | * shouldn't be called otherwise! | 
|  | 196 | */ | 
|  | 197 | static void __ll_do_awake(struct ll_struct *ll) | 
|  | 198 | { | 
|  | 199 | struct sk_buff *skb = NULL; | 
|  | 200 |  | 
|  | 201 | while ((skb = skb_dequeue(&ll->tx_wait_q))) | 
|  | 202 | skb_queue_tail(&ll->txq, skb); | 
|  | 203 |  | 
|  | 204 | ll->hcill_state = HCILL_AWAKE; | 
|  | 205 | } | 
|  | 206 |  | 
|  | 207 | /* | 
|  | 208 | * Called upon a wake-up-indication from the device | 
|  | 209 | */ | 
|  | 210 | static void ll_device_want_to_wakeup(struct hci_uart *hu) | 
|  | 211 | { | 
|  | 212 | unsigned long flags; | 
|  | 213 | struct ll_struct *ll = hu->priv; | 
|  | 214 |  | 
|  | 215 | BT_DBG("hu %p", hu); | 
|  | 216 |  | 
|  | 217 | /* lock hcill state */ | 
|  | 218 | spin_lock_irqsave(&ll->hcill_lock, flags); | 
|  | 219 |  | 
|  | 220 | switch (ll->hcill_state) { | 
|  | 221 | case HCILL_ASLEEP_TO_AWAKE: | 
|  | 222 | /* | 
|  | 223 | * This state means that both the host and the BRF chip | 
|  | 224 | * have simultaneously sent a wake-up-indication packet. | 
|  | 225 | * Traditionally, in this case, receiving a wake-up-indication | 
|  | 226 | * was enough and an additional wake-up-ack wasn't needed. | 
|  | 227 | * This has changed with the BRF6350, which does require an | 
|  | 228 | * explicit wake-up-ack. Other BRF versions, which do not | 
|  | 229 | * require an explicit ack here, do accept it, thus it is | 
|  | 230 | * perfectly safe to always send one. | 
|  | 231 | */ | 
|  | 232 | BT_DBG("dual wake-up-indication"); | 
|  | 233 | /* fall through */ | 
|  | 234 | case HCILL_ASLEEP: | 
|  | 235 | /* acknowledge device wake up */ | 
|  | 236 | if (send_hcill_cmd(HCILL_WAKE_UP_ACK, hu) < 0) { | 
|  | 237 | BT_ERR("cannot acknowledge device wake up"); | 
|  | 238 | goto out; | 
|  | 239 | } | 
|  | 240 | break; | 
|  | 241 | default: | 
|  | 242 | /* any other state is illegal */ | 
|  | 243 | BT_ERR("received HCILL_WAKE_UP_IND in state %ld", ll->hcill_state); | 
|  | 244 | break; | 
|  | 245 | } | 
|  | 246 |  | 
|  | 247 | /* send pending packets and change state to HCILL_AWAKE */ | 
|  | 248 | __ll_do_awake(ll); | 
|  | 249 |  | 
|  | 250 | out: | 
|  | 251 | spin_unlock_irqrestore(&ll->hcill_lock, flags); | 
|  | 252 |  | 
|  | 253 | /* actually send the packets */ | 
|  | 254 | hci_uart_tx_wakeup(hu); | 
|  | 255 | } | 
|  | 256 |  | 
|  | 257 | /* | 
|  | 258 | * Called upon a sleep-indication from the device | 
|  | 259 | */ | 
|  | 260 | static void ll_device_want_to_sleep(struct hci_uart *hu) | 
|  | 261 | { | 
|  | 262 | unsigned long flags; | 
|  | 263 | struct ll_struct *ll = hu->priv; | 
|  | 264 |  | 
|  | 265 | BT_DBG("hu %p", hu); | 
|  | 266 |  | 
|  | 267 | /* lock hcill state */ | 
|  | 268 | spin_lock_irqsave(&ll->hcill_lock, flags); | 
|  | 269 |  | 
|  | 270 | /* sanity check */ | 
|  | 271 | if (ll->hcill_state != HCILL_AWAKE) | 
|  | 272 | BT_ERR("ERR: HCILL_GO_TO_SLEEP_IND in state %ld", ll->hcill_state); | 
|  | 273 |  | 
|  | 274 | /* acknowledge device sleep */ | 
|  | 275 | if (send_hcill_cmd(HCILL_GO_TO_SLEEP_ACK, hu) < 0) { | 
|  | 276 | BT_ERR("cannot acknowledge device sleep"); | 
|  | 277 | goto out; | 
|  | 278 | } | 
|  | 279 |  | 
|  | 280 | /* update state */ | 
|  | 281 | ll->hcill_state = HCILL_ASLEEP; | 
|  | 282 |  | 
|  | 283 | out: | 
|  | 284 | spin_unlock_irqrestore(&ll->hcill_lock, flags); | 
|  | 285 |  | 
|  | 286 | /* actually send the sleep ack packet */ | 
|  | 287 | hci_uart_tx_wakeup(hu); | 
|  | 288 | } | 
|  | 289 |  | 
|  | 290 | /* | 
|  | 291 | * Called upon wake-up-acknowledgement from the device | 
|  | 292 | */ | 
|  | 293 | static void ll_device_woke_up(struct hci_uart *hu) | 
|  | 294 | { | 
|  | 295 | unsigned long flags; | 
|  | 296 | struct ll_struct *ll = hu->priv; | 
|  | 297 |  | 
|  | 298 | BT_DBG("hu %p", hu); | 
|  | 299 |  | 
|  | 300 | /* lock hcill state */ | 
|  | 301 | spin_lock_irqsave(&ll->hcill_lock, flags); | 
|  | 302 |  | 
|  | 303 | /* sanity check */ | 
|  | 304 | if (ll->hcill_state != HCILL_ASLEEP_TO_AWAKE) | 
|  | 305 | BT_ERR("received HCILL_WAKE_UP_ACK in state %ld", ll->hcill_state); | 
|  | 306 |  | 
|  | 307 | /* send pending packets and change state to HCILL_AWAKE */ | 
|  | 308 | __ll_do_awake(ll); | 
|  | 309 |  | 
|  | 310 | spin_unlock_irqrestore(&ll->hcill_lock, flags); | 
|  | 311 |  | 
|  | 312 | /* actually send the packets */ | 
|  | 313 | hci_uart_tx_wakeup(hu); | 
|  | 314 | } | 
|  | 315 |  | 
|  | 316 | /* Enqueue frame for transmittion (padding, crc, etc) */ | 
|  | 317 | /* may be called from two simultaneous tasklets */ | 
|  | 318 | static int ll_enqueue(struct hci_uart *hu, struct sk_buff *skb) | 
|  | 319 | { | 
|  | 320 | unsigned long flags = 0; | 
|  | 321 | struct ll_struct *ll = hu->priv; | 
|  | 322 |  | 
|  | 323 | BT_DBG("hu %p skb %p", hu, skb); | 
|  | 324 |  | 
|  | 325 | /* Prepend skb with frame type */ | 
|  | 326 | memcpy(skb_push(skb, 1), &hci_skb_pkt_type(skb), 1); | 
|  | 327 |  | 
|  | 328 | /* lock hcill state */ | 
|  | 329 | spin_lock_irqsave(&ll->hcill_lock, flags); | 
|  | 330 |  | 
|  | 331 | /* act according to current state */ | 
|  | 332 | switch (ll->hcill_state) { | 
|  | 333 | case HCILL_AWAKE: | 
|  | 334 | BT_DBG("device awake, sending normally"); | 
|  | 335 | skb_queue_tail(&ll->txq, skb); | 
|  | 336 | break; | 
|  | 337 | case HCILL_ASLEEP: | 
|  | 338 | BT_DBG("device asleep, waking up and queueing packet"); | 
|  | 339 | /* save packet for later */ | 
|  | 340 | skb_queue_tail(&ll->tx_wait_q, skb); | 
|  | 341 | /* awake device */ | 
|  | 342 | if (send_hcill_cmd(HCILL_WAKE_UP_IND, hu) < 0) { | 
|  | 343 | BT_ERR("cannot wake up device"); | 
|  | 344 | break; | 
|  | 345 | } | 
|  | 346 | ll->hcill_state = HCILL_ASLEEP_TO_AWAKE; | 
|  | 347 | break; | 
|  | 348 | case HCILL_ASLEEP_TO_AWAKE: | 
|  | 349 | BT_DBG("device waking up, queueing packet"); | 
|  | 350 | /* transient state; just keep packet for later */ | 
|  | 351 | skb_queue_tail(&ll->tx_wait_q, skb); | 
|  | 352 | break; | 
|  | 353 | default: | 
|  | 354 | BT_ERR("illegal hcill state: %ld (losing packet)", ll->hcill_state); | 
|  | 355 | kfree_skb(skb); | 
|  | 356 | break; | 
|  | 357 | } | 
|  | 358 |  | 
|  | 359 | spin_unlock_irqrestore(&ll->hcill_lock, flags); | 
|  | 360 |  | 
|  | 361 | return 0; | 
|  | 362 | } | 
|  | 363 |  | 
|  | 364 | static int ll_recv_frame(struct hci_dev *hdev, struct sk_buff *skb) | 
|  | 365 | { | 
|  | 366 | struct hci_uart *hu = hci_get_drvdata(hdev); | 
|  | 367 | struct ll_struct *ll = hu->priv; | 
|  | 368 |  | 
|  | 369 | switch (hci_skb_pkt_type(skb)) { | 
|  | 370 | case HCILL_GO_TO_SLEEP_IND: | 
|  | 371 | BT_DBG("HCILL_GO_TO_SLEEP_IND packet"); | 
|  | 372 | ll_device_want_to_sleep(hu); | 
|  | 373 | break; | 
|  | 374 | case HCILL_GO_TO_SLEEP_ACK: | 
|  | 375 | /* shouldn't happen */ | 
|  | 376 | bt_dev_err(hdev, "received HCILL_GO_TO_SLEEP_ACK in state %ld", | 
|  | 377 | ll->hcill_state); | 
|  | 378 | break; | 
|  | 379 | case HCILL_WAKE_UP_IND: | 
|  | 380 | BT_DBG("HCILL_WAKE_UP_IND packet"); | 
|  | 381 | ll_device_want_to_wakeup(hu); | 
|  | 382 | break; | 
|  | 383 | case HCILL_WAKE_UP_ACK: | 
|  | 384 | BT_DBG("HCILL_WAKE_UP_ACK packet"); | 
|  | 385 | ll_device_woke_up(hu); | 
|  | 386 | break; | 
|  | 387 | } | 
|  | 388 |  | 
|  | 389 | kfree_skb(skb); | 
|  | 390 | return 0; | 
|  | 391 | } | 
|  | 392 |  | 
|  | 393 | #define LL_RECV_SLEEP_IND \ | 
|  | 394 | .type = HCILL_GO_TO_SLEEP_IND, \ | 
|  | 395 | .hlen = 0, \ | 
|  | 396 | .loff = 0, \ | 
|  | 397 | .lsize = 0, \ | 
|  | 398 | .maxlen = 0 | 
|  | 399 |  | 
|  | 400 | #define LL_RECV_SLEEP_ACK \ | 
|  | 401 | .type = HCILL_GO_TO_SLEEP_ACK, \ | 
|  | 402 | .hlen = 0, \ | 
|  | 403 | .loff = 0, \ | 
|  | 404 | .lsize = 0, \ | 
|  | 405 | .maxlen = 0 | 
|  | 406 |  | 
|  | 407 | #define LL_RECV_WAKE_IND \ | 
|  | 408 | .type = HCILL_WAKE_UP_IND, \ | 
|  | 409 | .hlen = 0, \ | 
|  | 410 | .loff = 0, \ | 
|  | 411 | .lsize = 0, \ | 
|  | 412 | .maxlen = 0 | 
|  | 413 |  | 
|  | 414 | #define LL_RECV_WAKE_ACK \ | 
|  | 415 | .type = HCILL_WAKE_UP_ACK, \ | 
|  | 416 | .hlen = 0, \ | 
|  | 417 | .loff = 0, \ | 
|  | 418 | .lsize = 0, \ | 
|  | 419 | .maxlen = 0 | 
|  | 420 |  | 
|  | 421 | static const struct h4_recv_pkt ll_recv_pkts[] = { | 
|  | 422 | { H4_RECV_ACL,       .recv = hci_recv_frame }, | 
|  | 423 | { H4_RECV_SCO,       .recv = hci_recv_frame }, | 
|  | 424 | { H4_RECV_EVENT,     .recv = hci_recv_frame }, | 
|  | 425 | { LL_RECV_SLEEP_IND, .recv = ll_recv_frame  }, | 
|  | 426 | { LL_RECV_SLEEP_ACK, .recv = ll_recv_frame  }, | 
|  | 427 | { LL_RECV_WAKE_IND,  .recv = ll_recv_frame  }, | 
|  | 428 | { LL_RECV_WAKE_ACK,  .recv = ll_recv_frame  }, | 
|  | 429 | }; | 
|  | 430 |  | 
|  | 431 | /* Recv data */ | 
|  | 432 | static int ll_recv(struct hci_uart *hu, const void *data, int count) | 
|  | 433 | { | 
|  | 434 | struct ll_struct *ll = hu->priv; | 
|  | 435 |  | 
|  | 436 | if (!test_bit(HCI_UART_REGISTERED, &hu->flags)) | 
|  | 437 | return -EUNATCH; | 
|  | 438 |  | 
|  | 439 | ll->rx_skb = h4_recv_buf(hu->hdev, ll->rx_skb, data, count, | 
|  | 440 | ll_recv_pkts, ARRAY_SIZE(ll_recv_pkts)); | 
|  | 441 | if (IS_ERR(ll->rx_skb)) { | 
|  | 442 | int err = PTR_ERR(ll->rx_skb); | 
|  | 443 | bt_dev_err(hu->hdev, "Frame reassembly failed (%d)", err); | 
|  | 444 | ll->rx_skb = NULL; | 
|  | 445 | return err; | 
|  | 446 | } | 
|  | 447 |  | 
|  | 448 | return count; | 
|  | 449 | } | 
|  | 450 |  | 
|  | 451 | static struct sk_buff *ll_dequeue(struct hci_uart *hu) | 
|  | 452 | { | 
|  | 453 | struct ll_struct *ll = hu->priv; | 
|  | 454 | return skb_dequeue(&ll->txq); | 
|  | 455 | } | 
|  | 456 |  | 
|  | 457 | #if IS_ENABLED(CONFIG_SERIAL_DEV_BUS) | 
|  | 458 | static int read_local_version(struct hci_dev *hdev) | 
|  | 459 | { | 
|  | 460 | int err = 0; | 
|  | 461 | unsigned short version = 0; | 
|  | 462 | struct sk_buff *skb; | 
|  | 463 | struct hci_rp_read_local_version *ver; | 
|  | 464 |  | 
|  | 465 | skb = __hci_cmd_sync(hdev, HCI_OP_READ_LOCAL_VERSION, 0, NULL, HCI_INIT_TIMEOUT); | 
|  | 466 | if (IS_ERR(skb)) { | 
|  | 467 | bt_dev_err(hdev, "Reading TI version information failed (%ld)", | 
|  | 468 | PTR_ERR(skb)); | 
|  | 469 | return PTR_ERR(skb); | 
|  | 470 | } | 
|  | 471 | if (skb->len != sizeof(*ver)) { | 
|  | 472 | err = -EILSEQ; | 
|  | 473 | goto out; | 
|  | 474 | } | 
|  | 475 |  | 
|  | 476 | ver = (struct hci_rp_read_local_version *)skb->data; | 
|  | 477 | if (le16_to_cpu(ver->manufacturer) != 13) { | 
|  | 478 | err = -ENODEV; | 
|  | 479 | goto out; | 
|  | 480 | } | 
|  | 481 |  | 
|  | 482 | version = le16_to_cpu(ver->lmp_subver); | 
|  | 483 |  | 
|  | 484 | out: | 
|  | 485 | if (err) bt_dev_err(hdev, "Failed to read TI version info: %d", err); | 
|  | 486 | kfree_skb(skb); | 
|  | 487 | return err ? err : version; | 
|  | 488 | } | 
|  | 489 |  | 
|  | 490 | /** | 
|  | 491 | * download_firmware - | 
|  | 492 | *	internal function which parses through the .bts firmware | 
|  | 493 | *	script file intreprets SEND, DELAY actions only as of now | 
|  | 494 | */ | 
|  | 495 | static int download_firmware(struct ll_device *lldev) | 
|  | 496 | { | 
|  | 497 | unsigned short chip, min_ver, maj_ver; | 
|  | 498 | int version, err, len; | 
|  | 499 | unsigned char *ptr, *action_ptr; | 
|  | 500 | unsigned char bts_scr_name[40];	/* 40 char long bts scr name? */ | 
|  | 501 | const struct firmware *fw; | 
|  | 502 | struct sk_buff *skb; | 
|  | 503 | struct hci_command *cmd; | 
|  | 504 |  | 
|  | 505 | version = read_local_version(lldev->hu.hdev); | 
|  | 506 | if (version < 0) | 
|  | 507 | return version; | 
|  | 508 |  | 
|  | 509 | chip = (version & 0x7C00) >> 10; | 
|  | 510 | min_ver = (version & 0x007F); | 
|  | 511 | maj_ver = (version & 0x0380) >> 7; | 
|  | 512 | if (version & 0x8000) | 
|  | 513 | maj_ver |= 0x0008; | 
|  | 514 |  | 
|  | 515 | snprintf(bts_scr_name, sizeof(bts_scr_name), | 
|  | 516 | "ti-connectivity/TIInit_%d.%d.%d.bts", | 
|  | 517 | chip, maj_ver, min_ver); | 
|  | 518 |  | 
|  | 519 | err = request_firmware(&fw, bts_scr_name, &lldev->serdev->dev); | 
|  | 520 | if (err || !fw->data || !fw->size) { | 
|  | 521 | bt_dev_err(lldev->hu.hdev, "request_firmware failed(errno %d) for %s", | 
|  | 522 | err, bts_scr_name); | 
|  | 523 | return -EINVAL; | 
|  | 524 | } | 
|  | 525 | ptr = (void *)fw->data; | 
|  | 526 | len = fw->size; | 
|  | 527 | /* bts_header to remove out magic number and | 
|  | 528 | * version | 
|  | 529 | */ | 
|  | 530 | ptr += sizeof(struct bts_header); | 
|  | 531 | len -= sizeof(struct bts_header); | 
|  | 532 |  | 
|  | 533 | while (len > 0 && ptr) { | 
|  | 534 | bt_dev_dbg(lldev->hu.hdev, " action size %d, type %d ", | 
|  | 535 | ((struct bts_action *)ptr)->size, | 
|  | 536 | ((struct bts_action *)ptr)->type); | 
|  | 537 |  | 
|  | 538 | action_ptr = &(((struct bts_action *)ptr)->data[0]); | 
|  | 539 |  | 
|  | 540 | switch (((struct bts_action *)ptr)->type) { | 
|  | 541 | case ACTION_SEND_COMMAND:	/* action send */ | 
|  | 542 | bt_dev_dbg(lldev->hu.hdev, "S"); | 
|  | 543 | cmd = (struct hci_command *)action_ptr; | 
|  | 544 | if (cmd->opcode == HCI_VS_UPDATE_UART_HCI_BAUDRATE) { | 
|  | 545 | /* ignore remote change | 
|  | 546 | * baud rate HCI VS command | 
|  | 547 | */ | 
|  | 548 | bt_dev_warn(lldev->hu.hdev, "change remote baud rate command in firmware"); | 
|  | 549 | break; | 
|  | 550 | } | 
|  | 551 | if (cmd->prefix != 1) | 
|  | 552 | bt_dev_dbg(lldev->hu.hdev, "command type %d", cmd->prefix); | 
|  | 553 |  | 
|  | 554 | skb = __hci_cmd_sync(lldev->hu.hdev, cmd->opcode, cmd->plen, &cmd->speed, HCI_INIT_TIMEOUT); | 
|  | 555 | if (IS_ERR(skb)) { | 
|  | 556 | bt_dev_err(lldev->hu.hdev, "send command failed"); | 
|  | 557 | err = PTR_ERR(skb); | 
|  | 558 | goto out_rel_fw; | 
|  | 559 | } | 
|  | 560 | kfree_skb(skb); | 
|  | 561 | break; | 
|  | 562 | case ACTION_WAIT_EVENT:  /* wait */ | 
|  | 563 | /* no need to wait as command was synchronous */ | 
|  | 564 | bt_dev_dbg(lldev->hu.hdev, "W"); | 
|  | 565 | break; | 
|  | 566 | case ACTION_DELAY:	/* sleep */ | 
|  | 567 | bt_dev_info(lldev->hu.hdev, "sleep command in scr"); | 
|  | 568 | msleep(((struct bts_action_delay *)action_ptr)->msec); | 
|  | 569 | break; | 
|  | 570 | } | 
|  | 571 | len -= (sizeof(struct bts_action) + | 
|  | 572 | ((struct bts_action *)ptr)->size); | 
|  | 573 | ptr += sizeof(struct bts_action) + | 
|  | 574 | ((struct bts_action *)ptr)->size; | 
|  | 575 | } | 
|  | 576 |  | 
|  | 577 | out_rel_fw: | 
|  | 578 | /* fw download complete */ | 
|  | 579 | release_firmware(fw); | 
|  | 580 | return err; | 
|  | 581 | } | 
|  | 582 |  | 
|  | 583 | static int ll_set_bdaddr(struct hci_dev *hdev, const bdaddr_t *bdaddr) | 
|  | 584 | { | 
|  | 585 | bdaddr_t bdaddr_swapped; | 
|  | 586 | struct sk_buff *skb; | 
|  | 587 |  | 
|  | 588 | /* HCI_VS_WRITE_BD_ADDR (at least on a CC2560A chip) expects the BD | 
|  | 589 | * address to be MSB first, but bdaddr_t has the convention of being | 
|  | 590 | * LSB first. | 
|  | 591 | */ | 
|  | 592 | baswap(&bdaddr_swapped, bdaddr); | 
|  | 593 | skb = __hci_cmd_sync(hdev, HCI_VS_WRITE_BD_ADDR, sizeof(bdaddr_t), | 
|  | 594 | &bdaddr_swapped, HCI_INIT_TIMEOUT); | 
|  | 595 | if (!IS_ERR(skb)) | 
|  | 596 | kfree_skb(skb); | 
|  | 597 |  | 
|  | 598 | return PTR_ERR_OR_ZERO(skb); | 
|  | 599 | } | 
|  | 600 |  | 
|  | 601 | static int ll_setup(struct hci_uart *hu) | 
|  | 602 | { | 
|  | 603 | int err, retry = 3; | 
|  | 604 | struct ll_device *lldev; | 
|  | 605 | struct serdev_device *serdev = hu->serdev; | 
|  | 606 | u32 speed; | 
|  | 607 |  | 
|  | 608 | if (!serdev) | 
|  | 609 | return 0; | 
|  | 610 |  | 
|  | 611 | lldev = serdev_device_get_drvdata(serdev); | 
|  | 612 |  | 
|  | 613 | hu->hdev->set_bdaddr = ll_set_bdaddr; | 
|  | 614 |  | 
|  | 615 | serdev_device_set_flow_control(serdev, true); | 
|  | 616 |  | 
|  | 617 | do { | 
|  | 618 | /* Reset the Bluetooth device */ | 
|  | 619 | gpiod_set_value_cansleep(lldev->enable_gpio, 0); | 
|  | 620 | msleep(5); | 
|  | 621 | gpiod_set_value_cansleep(lldev->enable_gpio, 1); | 
|  | 622 | err = serdev_device_wait_for_cts(serdev, true, 200); | 
|  | 623 | if (err) { | 
|  | 624 | bt_dev_err(hu->hdev, "Failed to get CTS"); | 
|  | 625 | return err; | 
|  | 626 | } | 
|  | 627 |  | 
|  | 628 | err = download_firmware(lldev); | 
|  | 629 | if (!err) | 
|  | 630 | break; | 
|  | 631 |  | 
|  | 632 | /* Toggle BT_EN and retry */ | 
|  | 633 | bt_dev_err(hu->hdev, "download firmware failed, retrying..."); | 
|  | 634 | } while (retry--); | 
|  | 635 |  | 
|  | 636 | if (err) | 
|  | 637 | return err; | 
|  | 638 |  | 
|  | 639 | /* Set BD address if one was specified at probe */ | 
|  | 640 | if (!bacmp(&lldev->bdaddr, BDADDR_NONE)) { | 
|  | 641 | /* This means that there was an error getting the BD address | 
|  | 642 | * during probe, so mark the device as having a bad address. | 
|  | 643 | */ | 
|  | 644 | set_bit(HCI_QUIRK_INVALID_BDADDR, &hu->hdev->quirks); | 
|  | 645 | } else if (bacmp(&lldev->bdaddr, BDADDR_ANY)) { | 
|  | 646 | err = ll_set_bdaddr(hu->hdev, &lldev->bdaddr); | 
|  | 647 | if (err) | 
|  | 648 | set_bit(HCI_QUIRK_INVALID_BDADDR, &hu->hdev->quirks); | 
|  | 649 | } | 
|  | 650 |  | 
|  | 651 | /* Operational speed if any */ | 
|  | 652 | if (hu->oper_speed) | 
|  | 653 | speed = hu->oper_speed; | 
|  | 654 | else if (hu->proto->oper_speed) | 
|  | 655 | speed = hu->proto->oper_speed; | 
|  | 656 | else | 
|  | 657 | speed = 0; | 
|  | 658 |  | 
|  | 659 | if (speed) { | 
|  | 660 | __le32 speed_le = cpu_to_le32(speed); | 
|  | 661 | struct sk_buff *skb; | 
|  | 662 |  | 
|  | 663 | skb = __hci_cmd_sync(hu->hdev, HCI_VS_UPDATE_UART_HCI_BAUDRATE, | 
|  | 664 | sizeof(speed_le), &speed_le, | 
|  | 665 | HCI_INIT_TIMEOUT); | 
|  | 666 | if (!IS_ERR(skb)) { | 
|  | 667 | kfree_skb(skb); | 
|  | 668 | serdev_device_set_baudrate(serdev, speed); | 
|  | 669 | } | 
|  | 670 | } | 
|  | 671 |  | 
|  | 672 | return 0; | 
|  | 673 | } | 
|  | 674 |  | 
|  | 675 | static const struct hci_uart_proto llp; | 
|  | 676 |  | 
|  | 677 | static int hci_ti_probe(struct serdev_device *serdev) | 
|  | 678 | { | 
|  | 679 | struct hci_uart *hu; | 
|  | 680 | struct ll_device *lldev; | 
|  | 681 | struct nvmem_cell *bdaddr_cell; | 
|  | 682 | u32 max_speed = 3000000; | 
|  | 683 |  | 
|  | 684 | lldev = devm_kzalloc(&serdev->dev, sizeof(struct ll_device), GFP_KERNEL); | 
|  | 685 | if (!lldev) | 
|  | 686 | return -ENOMEM; | 
|  | 687 | hu = &lldev->hu; | 
|  | 688 |  | 
|  | 689 | serdev_device_set_drvdata(serdev, lldev); | 
|  | 690 | lldev->serdev = hu->serdev = serdev; | 
|  | 691 |  | 
|  | 692 | lldev->enable_gpio = devm_gpiod_get_optional(&serdev->dev, "enable", GPIOD_OUT_LOW); | 
|  | 693 | if (IS_ERR(lldev->enable_gpio)) | 
|  | 694 | return PTR_ERR(lldev->enable_gpio); | 
|  | 695 |  | 
|  | 696 | lldev->ext_clk = devm_clk_get(&serdev->dev, "ext_clock"); | 
|  | 697 | if (IS_ERR(lldev->ext_clk) && PTR_ERR(lldev->ext_clk) != -ENOENT) | 
|  | 698 | return PTR_ERR(lldev->ext_clk); | 
|  | 699 |  | 
|  | 700 | of_property_read_u32(serdev->dev.of_node, "max-speed", &max_speed); | 
|  | 701 | hci_uart_set_speeds(hu, 115200, max_speed); | 
|  | 702 |  | 
|  | 703 | /* optional BD address from nvram */ | 
|  | 704 | bdaddr_cell = nvmem_cell_get(&serdev->dev, "bd-address"); | 
|  | 705 | if (IS_ERR(bdaddr_cell)) { | 
|  | 706 | int err = PTR_ERR(bdaddr_cell); | 
|  | 707 |  | 
|  | 708 | if (err == -EPROBE_DEFER) | 
|  | 709 | return err; | 
|  | 710 |  | 
|  | 711 | /* ENOENT means there is no matching nvmem cell and ENOSYS | 
|  | 712 | * means that nvmem is not enabled in the kernel configuration. | 
|  | 713 | */ | 
|  | 714 | if (err != -ENOENT && err != -ENOSYS) { | 
|  | 715 | /* If there was some other error, give userspace a | 
|  | 716 | * chance to fix the problem instead of failing to load | 
|  | 717 | * the driver. Using BDADDR_NONE as a flag that is | 
|  | 718 | * tested later in the setup function. | 
|  | 719 | */ | 
|  | 720 | dev_warn(&serdev->dev, | 
|  | 721 | "Failed to get \"bd-address\" nvmem cell (%d)\n", | 
|  | 722 | err); | 
|  | 723 | bacpy(&lldev->bdaddr, BDADDR_NONE); | 
|  | 724 | } | 
|  | 725 | } else { | 
|  | 726 | bdaddr_t *bdaddr; | 
|  | 727 | size_t len; | 
|  | 728 |  | 
|  | 729 | bdaddr = nvmem_cell_read(bdaddr_cell, &len); | 
|  | 730 | nvmem_cell_put(bdaddr_cell); | 
|  | 731 | if (IS_ERR(bdaddr)) { | 
|  | 732 | dev_err(&serdev->dev, "Failed to read nvmem bd-address\n"); | 
|  | 733 | return PTR_ERR(bdaddr); | 
|  | 734 | } | 
|  | 735 | if (len != sizeof(bdaddr_t)) { | 
|  | 736 | dev_err(&serdev->dev, "Invalid nvmem bd-address length\n"); | 
|  | 737 | kfree(bdaddr); | 
|  | 738 | return -EINVAL; | 
|  | 739 | } | 
|  | 740 |  | 
|  | 741 | /* As per the device tree bindings, the value from nvmem is | 
|  | 742 | * expected to be MSB first, but in the kernel it is expected | 
|  | 743 | * that bdaddr_t is LSB first. | 
|  | 744 | */ | 
|  | 745 | baswap(&lldev->bdaddr, bdaddr); | 
|  | 746 | kfree(bdaddr); | 
|  | 747 | } | 
|  | 748 |  | 
|  | 749 | return hci_uart_register_device(hu, &llp); | 
|  | 750 | } | 
|  | 751 |  | 
|  | 752 | static void hci_ti_remove(struct serdev_device *serdev) | 
|  | 753 | { | 
|  | 754 | struct ll_device *lldev = serdev_device_get_drvdata(serdev); | 
|  | 755 |  | 
|  | 756 | hci_uart_unregister_device(&lldev->hu); | 
|  | 757 | } | 
|  | 758 |  | 
|  | 759 | static const struct of_device_id hci_ti_of_match[] = { | 
|  | 760 | { .compatible = "ti,cc2560" }, | 
|  | 761 | { .compatible = "ti,wl1271-st" }, | 
|  | 762 | { .compatible = "ti,wl1273-st" }, | 
|  | 763 | { .compatible = "ti,wl1281-st" }, | 
|  | 764 | { .compatible = "ti,wl1283-st" }, | 
|  | 765 | { .compatible = "ti,wl1285-st" }, | 
|  | 766 | { .compatible = "ti,wl1801-st" }, | 
|  | 767 | { .compatible = "ti,wl1805-st" }, | 
|  | 768 | { .compatible = "ti,wl1807-st" }, | 
|  | 769 | { .compatible = "ti,wl1831-st" }, | 
|  | 770 | { .compatible = "ti,wl1835-st" }, | 
|  | 771 | { .compatible = "ti,wl1837-st" }, | 
|  | 772 | {}, | 
|  | 773 | }; | 
|  | 774 | MODULE_DEVICE_TABLE(of, hci_ti_of_match); | 
|  | 775 |  | 
|  | 776 | static struct serdev_device_driver hci_ti_drv = { | 
|  | 777 | .driver		= { | 
|  | 778 | .name	= "hci-ti", | 
|  | 779 | .of_match_table = of_match_ptr(hci_ti_of_match), | 
|  | 780 | }, | 
|  | 781 | .probe	= hci_ti_probe, | 
|  | 782 | .remove	= hci_ti_remove, | 
|  | 783 | }; | 
|  | 784 | #else | 
|  | 785 | #define ll_setup NULL | 
|  | 786 | #endif | 
|  | 787 |  | 
|  | 788 | static const struct hci_uart_proto llp = { | 
|  | 789 | .id		= HCI_UART_LL, | 
|  | 790 | .name		= "LL", | 
|  | 791 | .setup		= ll_setup, | 
|  | 792 | .open		= ll_open, | 
|  | 793 | .close		= ll_close, | 
|  | 794 | .recv		= ll_recv, | 
|  | 795 | .enqueue	= ll_enqueue, | 
|  | 796 | .dequeue	= ll_dequeue, | 
|  | 797 | .flush		= ll_flush, | 
|  | 798 | }; | 
|  | 799 |  | 
|  | 800 | int __init ll_init(void) | 
|  | 801 | { | 
|  | 802 | serdev_device_driver_register(&hci_ti_drv); | 
|  | 803 |  | 
|  | 804 | return hci_uart_register_proto(&llp); | 
|  | 805 | } | 
|  | 806 |  | 
|  | 807 | int __exit ll_deinit(void) | 
|  | 808 | { | 
|  | 809 | serdev_device_driver_unregister(&hci_ti_drv); | 
|  | 810 |  | 
|  | 811 | return hci_uart_unregister_proto(&llp); | 
|  | 812 | } |