projects / deliverable / linux.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Merge 3.5-rc7 into char-misc-next.
[deliverable/linux.git] / drivers / misc / mei / main.c
CommitLineData
ab841160
OW		 1/*
2 *
3 * Intel Management Engine Interface (Intel MEI) Linux driver
733ba91c 4 * Copyright (c) 2003-2012, Intel Corporation.
ab841160
OW		 5 *
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms and conditions of the GNU General Public License,
8 * version 2, as published by the Free Software Foundation.
9 *
10 * This program is distributed in the hope it will be useful, but WITHOUT
11 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
12 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
13 * more details.
14 *
15 */
16
2f3d2b49
TW		 17#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
18
ab841160
OW		 19#include <linux/module.h>
20#include <linux/moduleparam.h>
21#include <linux/kernel.h>
22#include <linux/device.h>
23#include <linux/fs.h>
24#include <linux/errno.h>
25#include <linux/types.h>
26#include <linux/fcntl.h>
27#include <linux/aio.h>
28#include <linux/pci.h>
29#include <linux/poll.h>
30#include <linux/init.h>
31#include <linux/ioctl.h>
32#include <linux/cdev.h>
ab841160
OW		 33#include <linux/sched.h>
34#include <linux/uuid.h>
35#include <linux/compat.h>
36#include <linux/jiffies.h>
37#include <linux/interrupt.h>
5b881e3c 38#include <linux/miscdevice.h>
ab841160
OW		 39
40#include "mei_dev.h"
4f3afe1d 41#include <linux/mei.h>
ab841160 42#include "interface.h"
ab841160 43
c38ea24e 44static const char mei_driver_name[] = "mei";
ab841160 45
ab841160
OW		 46/* The device pointer */
47/* Currently this driver works as long as there is only a single AMT device. */
4a3cafd5 48struct pci_dev *mei_device;
ab841160 49
ab841160
OW		 50/* mei_pci_tbl - PCI Device ID Table */
51static DEFINE_PCI_DEVICE_TABLE(mei_pci_tbl) = {
52 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_82946GZ)},
53 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_82G35)},
54 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_82Q965)},
55 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_82G965)},
56 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_82GM965)},
57 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_82GME965)},
58 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9_82Q35)},
59 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9_82G33)},
60 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9_82Q33)},
61 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9_82X38)},
62 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9_3200)},
63 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9_6)},
64 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9_7)},
65 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9_8)},
66 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9_9)},
67 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9_10)},
68 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9M_1)},
69 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9M_2)},
70 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9M_3)},
71 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH9M_4)},
72 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH10_1)},
73 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH10_2)},
74 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH10_3)},
75 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_ICH10_4)},
76 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_IBXPK_1)},
77 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_IBXPK_2)},
78 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_CPT_1)},
79 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_PBG_1)},
80 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_PPT_1)},
81 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_PPT_2)},
82 {PCI_DEVICE(PCI_VENDOR_ID_INTEL, MEI_DEV_ID_PPT_3)},
83
84 /* required last entry */
85 {0, }
86};
87
88MODULE_DEVICE_TABLE(pci, mei_pci_tbl);
89
90static DEFINE_MUTEX(mei_mutex);
91
ab841160
OW		 92
93/**
94 * mei_clear_list - removes all callbacks associated with file
95 * from mei_cb_list
96 *
97 * @dev: device structure.
98 * @file: file structure
99 * @mei_cb_list: callbacks list
100 *
101 * mei_clear_list is called to clear resources associated with file
102 * when application calls close function or Ctrl-C was pressed
103 *
104 * returns true if callback removed from the list, false otherwise
105 */
106static bool mei_clear_list(struct mei_device *dev,
107 struct file *file, struct list_head *mei_cb_list)
108{
109 struct mei_cl_cb *cb_pos = NULL;
110 struct mei_cl_cb *cb_next = NULL;
111 struct file *file_temp;
112 bool removed = false;
113
114 /* list all list member */
115 list_for_each_entry_safe(cb_pos, cb_next, mei_cb_list, cb_list) {
116 file_temp = (struct file *)cb_pos->file_object;
117 /* check if list member associated with a file */
118 if (file_temp == file) {
119 /* remove member from the list */
120 list_del(&cb_pos->cb_list);
121 /* check if cb equal to current iamthif cb */
122 if (dev->iamthif_current_cb == cb_pos) {
123 dev->iamthif_current_cb = NULL;
124 /* send flow control to iamthif client */
125 mei_send_flow_control(dev, &dev->iamthif_cl);
126 }
127 /* free all allocated buffers */
128 mei_free_cb_private(cb_pos);
129 cb_pos = NULL;
130 removed = true;
131 }
132 }
133 return removed;
134}
135
136/**
137 * mei_clear_lists - removes all callbacks associated with file
138 *
139 * @dev: device structure
140 * @file: file structure
141 *
142 * mei_clear_lists is called to clear resources associated with file
143 * when application calls close function or Ctrl-C was pressed
144 *
145 * returns true if callback removed from the list, false otherwise
146 */
147static bool mei_clear_lists(struct mei_device *dev, struct file *file)
148{
149 bool removed = false;
150
151 /* remove callbacks associated with a file */
152 mei_clear_list(dev, file, &dev->amthi_cmd_list.mei_cb.cb_list);
153 if (mei_clear_list(dev, file,
154 &dev->amthi_read_complete_list.mei_cb.cb_list))
155 removed = true;
156
157 mei_clear_list(dev, file, &dev->ctrl_rd_list.mei_cb.cb_list);
158
159 if (mei_clear_list(dev, file, &dev->ctrl_wr_list.mei_cb.cb_list))
160 removed = true;
161
162 if (mei_clear_list(dev, file, &dev->write_waiting_list.mei_cb.cb_list))
163 removed = true;
164
165 if (mei_clear_list(dev, file, &dev->write_list.mei_cb.cb_list))
166 removed = true;
167
168 /* check if iamthif_current_cb not NULL */
169 if (dev->iamthif_current_cb && !removed) {
170 /* check file and iamthif current cb association */
171 if (dev->iamthif_current_cb->file_object == file) {
172 /* remove cb */
173 mei_free_cb_private(dev->iamthif_current_cb);
174 dev->iamthif_current_cb = NULL;
175 removed = true;
176 }
177 }
178 return removed;
179}
180/**
181 * find_read_list_entry - find read list entry
182 *
183 * @dev: device structure
184 * @file: pointer to file structure
185 *
186 * returns cb on success, NULL on error
187 */
188static struct mei_cl_cb *find_read_list_entry(
189 struct mei_device *dev,
190 struct mei_cl *cl)
191{
b7cd2d9f
TW		 192 struct mei_cl_cb *pos = NULL;
193 struct mei_cl_cb *next = NULL;
ab841160 194
b7cd2d9f
TW		 195 dev_dbg(&dev->pdev->dev, "remove read_list CB\n");
196 list_for_each_entry_safe(pos, next,
197 &dev->read_list.mei_cb.cb_list, cb_list) {
198 struct mei_cl *cl_temp;
199 cl_temp = (struct mei_cl *)pos->file_private;
ab841160 200
b7cd2d9f
TW		 201 if (mei_cl_cmp_id(cl, cl_temp))
202 return pos;
ab841160
OW		 203 }
204 return NULL;
205}
206
207/**
208 * mei_open - the open function
209 *
210 * @inode: pointer to inode structure
211 * @file: pointer to file structure
212 *
213 * returns 0 on success, <0 on error
214 */
215static int mei_open(struct inode *inode, struct file *file)
216{
217 struct mei_cl *cl;
ab841160 218 struct mei_device *dev;
6f37aca8
TW		 219 unsigned long cl_id;
220 int err;
ab841160
OW		 221
222 err = -ENODEV;
223 if (!mei_device)
224 goto out;
225
226 dev = pci_get_drvdata(mei_device);
5b881e3c 227 if (!dev)
ab841160
OW		 228 goto out;
229
230 mutex_lock(&dev->device_lock);
231 err = -ENOMEM;
c95efb74 232 cl = mei_cl_allocate(dev);
ab841160 233 if (!cl)
303dfbf5 234 goto out_unlock;
ab841160
OW		 235
236 err = -ENODEV;
237 if (dev->mei_state != MEI_ENABLED) {
238 dev_dbg(&dev->pdev->dev, "mei_state != MEI_ENABLED mei_state= %d\n",
239 dev->mei_state);
240 goto out_unlock;
241 }
242 err = -EMFILE;
243 if (dev->open_handle_count >= MEI_MAX_OPEN_HANDLE_COUNT)
244 goto out_unlock;
245
6f37aca8
TW		 246 cl_id = find_first_zero_bit(dev->host_clients_map, MEI_CLIENTS_MAX);
247 if (cl_id >= MEI_CLIENTS_MAX)
ab841160
OW		 248 goto out_unlock;
249
6f37aca8
TW		 250 cl->host_client_id = cl_id;
251
ab841160
OW		 252 dev_dbg(&dev->pdev->dev, "client_id = %d\n", cl->host_client_id);
253
254 dev->open_handle_count++;
6f37aca8 255
ab841160
OW		 256 list_add_tail(&cl->link, &dev->file_list);
257
258 set_bit(cl->host_client_id, dev->host_clients_map);
259 cl->state = MEI_FILE_INITIALIZING;
260 cl->sm_state = 0;
261
262 file->private_data = cl;
263 mutex_unlock(&dev->device_lock);
264
5b881e3c 265 return nonseekable_open(inode, file);
ab841160
OW		 266
267out_unlock:
268 mutex_unlock(&dev->device_lock);
269 kfree(cl);
270out:
271 return err;
272}
273
274/**
275 * mei_release - the release function
276 *
277 * @inode: pointer to inode structure
278 * @file: pointer to file structure
279 *
280 * returns 0 on success, <0 on error
281 */
282static int mei_release(struct inode *inode, struct file *file)
283{
284 struct mei_cl *cl = file->private_data;
285 struct mei_cl_cb *cb;
286 struct mei_device *dev;
287 int rets = 0;
288
289 if (WARN_ON(!cl || !cl->dev))
290 return -ENODEV;
291
292 dev = cl->dev;
293
294 mutex_lock(&dev->device_lock);
295 if (cl != &dev->iamthif_cl) {
296 if (cl->state == MEI_FILE_CONNECTED) {
297 cl->state = MEI_FILE_DISCONNECTING;
298 dev_dbg(&dev->pdev->dev,
299 "disconnecting client host client = %d, "
300 "ME client = %d\n",
301 cl->host_client_id,
302 cl->me_client_id);
303 rets = mei_disconnect_host_client(dev, cl);
304 }
0288c7c9 305 mei_cl_flush_queues(cl);
ab841160
OW		 306 dev_dbg(&dev->pdev->dev, "remove client host client = %d, ME client = %d\n",
307 cl->host_client_id,
308 cl->me_client_id);
309
310 if (dev->open_handle_count > 0) {
441ab50f 311 clear_bit(cl->host_client_id, dev->host_clients_map);
ab841160
OW		 312 dev->open_handle_count--;
313 }
314 mei_remove_client_from_file_list(dev, cl->host_client_id);
315
316 /* free read cb */
317 cb = NULL;
318 if (cl->read_cb) {
319 cb = find_read_list_entry(dev, cl);
320 /* Remove entry from read list */
321 if (cb)
322 list_del(&cb->cb_list);
323
324 cb = cl->read_cb;
325 cl->read_cb = NULL;
326 }
327
328 file->private_data = NULL;
329
330 if (cb) {
331 mei_free_cb_private(cb);
332 cb = NULL;
333 }
334
335 kfree(cl);
336 } else {
337 if (dev->open_handle_count > 0)
338 dev->open_handle_count--;
339
340 if (dev->iamthif_file_object == file &&
341 dev->iamthif_state != MEI_IAMTHIF_IDLE) {
342
343 dev_dbg(&dev->pdev->dev, "amthi canceled iamthif state %d\n",
344 dev->iamthif_state);
eb9af0ac 345 dev->iamthif_canceled = true;
ab841160
OW		 346 if (dev->iamthif_state == MEI_IAMTHIF_READ_COMPLETE) {
347 dev_dbg(&dev->pdev->dev, "run next amthi iamthif cb\n");
c95efb74 348 mei_run_next_iamthif_cmd(dev);
ab841160
OW		 349 }
350 }
351
352 if (mei_clear_lists(dev, file))
353 dev->iamthif_state = MEI_IAMTHIF_IDLE;
354
355 }
356 mutex_unlock(&dev->device_lock);
357 return rets;
358}
359
360
361/**
362 * mei_read - the read function.
363 *
364 * @file: pointer to file structure
365 * @ubuf: pointer to user buffer
366 * @length: buffer length
367 * @offset: data offset in buffer
368 *
369 * returns >=0 data length on success , <0 on error
370 */
371static ssize_t mei_read(struct file *file, char __user *ubuf,
441ab50f 372 size_t length, loff_t *offset)
ab841160
OW		 373{
374 struct mei_cl *cl = file->private_data;
375 struct mei_cl_cb *cb_pos = NULL;
376 struct mei_cl_cb *cb = NULL;
377 struct mei_device *dev;
378 int i;
379 int rets;
380 int err;
381
382
383 if (WARN_ON(!cl || !cl->dev))
384 return -ENODEV;
385
386 dev = cl->dev;
387
388 mutex_lock(&dev->device_lock);
389 if (dev->mei_state != MEI_ENABLED) {
390 rets = -ENODEV;
391 goto out;
392 }
393
394 if ((cl->sm_state & MEI_WD_STATE_INDEPENDENCE_MSG_SENT) == 0) {
395 /* Do not allow to read watchdog client */
396 i = mei_find_me_client_index(dev, mei_wd_guid);
397 if (i >= 0) {
398 struct mei_me_client *me_client = &dev->me_clients[i];
399
400 if (cl->me_client_id == me_client->client_id) {
401 rets = -EBADF;
402 goto out;
403 }
404 }
405 } else {
406 cl->sm_state &= ~MEI_WD_STATE_INDEPENDENCE_MSG_SENT;
407 }
408
409 if (cl == &dev->iamthif_cl) {
410 rets = amthi_read(dev, file, ubuf, length, offset);
411 goto out;
412 }
413
414 if (cl->read_cb && cl->read_cb->information > *offset) {
415 cb = cl->read_cb;
416 goto copy_buffer;
417 } else if (cl->read_cb && cl->read_cb->information > 0 &&
418 cl->read_cb->information <= *offset) {
419 cb = cl->read_cb;
420 rets = 0;
421 goto free;
422 } else if ((!cl->read_cb || !cl->read_cb->information) &&
423 *offset > 0) {
5f9092f3 424 /*Offset needs to be cleaned for contiguous reads*/
ab841160
OW		 425 *offset = 0;
426 rets = 0;
427 goto out;
428 }
429
430 err = mei_start_read(dev, cl);
431 if (err && err != -EBUSY) {
432 dev_dbg(&dev->pdev->dev,
433 "mei start read failure with status = %d\n", err);
434 rets = err;
435 goto out;
436 }
437
438 if (MEI_READ_COMPLETE != cl->reading_state &&
439 !waitqueue_active(&cl->rx_wait)) {
440 if (file->f_flags & O_NONBLOCK) {
441 rets = -EAGAIN;
442 goto out;
443 }
444
445 mutex_unlock(&dev->device_lock);
446
447 if (wait_event_interruptible(cl->rx_wait,
448 (MEI_READ_COMPLETE == cl->reading_state ||
449 MEI_FILE_INITIALIZING == cl->state ||
450 MEI_FILE_DISCONNECTED == cl->state ||
451 MEI_FILE_DISCONNECTING == cl->state))) {
452 if (signal_pending(current))
453 return -EINTR;
454 return -ERESTARTSYS;
455 }
456
457 mutex_lock(&dev->device_lock);
458 if (MEI_FILE_INITIALIZING == cl->state ||
459 MEI_FILE_DISCONNECTED == cl->state ||
460 MEI_FILE_DISCONNECTING == cl->state) {
461 rets = -EBUSY;
462 goto out;
463 }
464 }
465
466 cb = cl->read_cb;
467
468 if (!cb) {
469 rets = -ENODEV;
470 goto out;
471 }
472 if (cl->reading_state != MEI_READ_COMPLETE) {
473 rets = 0;
474 goto out;
475 }
476 /* now copy the data to user space */
477copy_buffer:
478 dev_dbg(&dev->pdev->dev, "cb->response_buffer size - %d\n",
479 cb->response_buffer.size);
480 dev_dbg(&dev->pdev->dev, "cb->information - %lu\n",
481 cb->information);
482 if (length == 0 || ubuf == NULL || *offset > cb->information) {
483 rets = -EMSGSIZE;
484 goto free;
485 }
486
5f9092f3 487 /* length is being truncated to PAGE_SIZE, however, */
ab841160
OW		 488 /* information size may be longer */
489 length = min_t(size_t, length, (cb->information - *offset));
490
441ab50f 491 if (copy_to_user(ubuf, cb->response_buffer.data + *offset, length)) {
ab841160
OW		 492 rets = -EFAULT;
493 goto free;
494 }
495
496 rets = length;
497 *offset += length;
498 if ((unsigned long)*offset < cb->information)
499 goto out;
500
501free:
502 cb_pos = find_read_list_entry(dev, cl);
503 /* Remove entry from read list */
504 if (cb_pos)
505 list_del(&cb_pos->cb_list);
506 mei_free_cb_private(cb);
507 cl->reading_state = MEI_IDLE;
508 cl->read_cb = NULL;
509 cl->read_pending = 0;
510out:
511 dev_dbg(&dev->pdev->dev, "end mei read rets= %d\n", rets);
512 mutex_unlock(&dev->device_lock);
513 return rets;
514}
515
516/**
517 * mei_write - the write function.
518 *
519 * @file: pointer to file structure
520 * @ubuf: pointer to user buffer
521 * @length: buffer length
522 * @offset: data offset in buffer
523 *
524 * returns >=0 data length on success , <0 on error
525 */
526static ssize_t mei_write(struct file *file, const char __user *ubuf,
441ab50f 527 size_t length, loff_t *offset)
ab841160
OW		 528{
529 struct mei_cl *cl = file->private_data;
530 struct mei_cl_cb *write_cb = NULL;
531 struct mei_msg_hdr mei_hdr;
532 struct mei_device *dev;
533 unsigned long timeout = 0;
534 int rets;
535 int i;
536
537 if (WARN_ON(!cl || !cl->dev))
538 return -ENODEV;
539
540 dev = cl->dev;
541
542 mutex_lock(&dev->device_lock);
543
544 if (dev->mei_state != MEI_ENABLED) {
545 mutex_unlock(&dev->device_lock);
546 return -ENODEV;
547 }
548
549 if (cl == &dev->iamthif_cl) {
550 write_cb = find_amthi_read_list_entry(dev, file);
551
552 if (write_cb) {
553 timeout = write_cb->read_time +
554 msecs_to_jiffies(IAMTHIF_READ_TIMER);
555
556 if (time_after(jiffies, timeout) ||
557 cl->reading_state == MEI_READ_COMPLETE) {
558 *offset = 0;
559 list_del(&write_cb->cb_list);
560 mei_free_cb_private(write_cb);
561 write_cb = NULL;
562 }
563 }
564 }
565
566 /* free entry used in read */
567 if (cl->reading_state == MEI_READ_COMPLETE) {
568 *offset = 0;
569 write_cb = find_read_list_entry(dev, cl);
570 if (write_cb) {
571 list_del(&write_cb->cb_list);
572 mei_free_cb_private(write_cb);
573 write_cb = NULL;
574 cl->reading_state = MEI_IDLE;
575 cl->read_cb = NULL;
576 cl->read_pending = 0;
577 }
441ab50f 578 } else if (cl->reading_state == MEI_IDLE && !cl->read_pending)
ab841160
OW		 579 *offset = 0;
580
581
582 write_cb = kzalloc(sizeof(struct mei_cl_cb), GFP_KERNEL);
583 if (!write_cb) {
584 mutex_unlock(&dev->device_lock);
585 return -ENOMEM;
586 }
587
588 write_cb->file_object = file;
589 write_cb->file_private = cl;
590 write_cb->request_buffer.data = kmalloc(length, GFP_KERNEL);
591 rets = -ENOMEM;
592 if (!write_cb->request_buffer.data)
593 goto unlock_dev;
594
595 dev_dbg(&dev->pdev->dev, "length =%d\n", (int) length);
596
597 rets = -EFAULT;
598 if (copy_from_user(write_cb->request_buffer.data, ubuf, length))
599 goto unlock_dev;
600
601 cl->sm_state = 0;
602 if (length == 4 &&
603 ((memcmp(mei_wd_state_independence_msg[0],
604 write_cb->request_buffer.data, 4) == 0) ||
605 (memcmp(mei_wd_state_independence_msg[1],
606 write_cb->request_buffer.data, 4) == 0) ||
607 (memcmp(mei_wd_state_independence_msg[2],
608 write_cb->request_buffer.data, 4) == 0)))
609 cl->sm_state |= MEI_WD_STATE_INDEPENDENCE_MSG_SENT;
610
611 INIT_LIST_HEAD(&write_cb->cb_list);
612 if (cl == &dev->iamthif_cl) {
613 write_cb->response_buffer.data =
614 kmalloc(dev->iamthif_mtu, GFP_KERNEL);
615 if (!write_cb->response_buffer.data) {
616 rets = -ENOMEM;
617 goto unlock_dev;
618 }
619 if (dev->mei_state != MEI_ENABLED) {
620 rets = -ENODEV;
621 goto unlock_dev;
622 }
cf9673da 623 for (i = 0; i < dev->me_clients_num; i++) {
ab841160
OW		 624 if (dev->me_clients[i].client_id ==
625 dev->iamthif_cl.me_client_id)
626 break;
627 }
628
629 if (WARN_ON(dev->me_clients[i].client_id != cl->me_client_id)) {
630 rets = -ENODEV;
631 goto unlock_dev;
632 }
cf9673da 633 if (i == dev->me_clients_num ||
ab841160
OW		 634 (dev->me_clients[i].client_id !=
635 dev->iamthif_cl.me_client_id)) {
636 rets = -ENODEV;
637 goto unlock_dev;
638 } else if (length > dev->me_clients[i].props.max_msg_length ||
639 length <= 0) {
640 rets = -EMSGSIZE;
641 goto unlock_dev;
642 }
643
644 write_cb->response_buffer.size = dev->iamthif_mtu;
645 write_cb->major_file_operations = MEI_IOCTL;
646 write_cb->information = 0;
647 write_cb->request_buffer.size = length;
648 if (dev->iamthif_cl.state != MEI_FILE_CONNECTED) {
649 rets = -ENODEV;
650 goto unlock_dev;
651 }
652
653 if (!list_empty(&dev->amthi_cmd_list.mei_cb.cb_list) ||
654 dev->iamthif_state != MEI_IAMTHIF_IDLE) {
655 dev_dbg(&dev->pdev->dev, "amthi_state = %d\n",
656 (int) dev->iamthif_state);
657 dev_dbg(&dev->pdev->dev, "add amthi cb to amthi cmd waiting list\n");
658 list_add_tail(&write_cb->cb_list,
659 &dev->amthi_cmd_list.mei_cb.cb_list);
660 rets = length;
661 } else {
662 dev_dbg(&dev->pdev->dev, "call amthi write\n");
663 rets = amthi_write(dev, write_cb);
664
665 if (rets) {
666 dev_dbg(&dev->pdev->dev, "amthi write failed with status = %d\n",
667 rets);
668 goto unlock_dev;
669 }
670 rets = length;
671 }
672 mutex_unlock(&dev->device_lock);
673 return rets;
674 }
675
676 write_cb->major_file_operations = MEI_WRITE;
677 /* make sure information is zero before we start */
678
679 write_cb->information = 0;
680 write_cb->request_buffer.size = length;
681
682 dev_dbg(&dev->pdev->dev, "host client = %d, ME client = %d\n",
683 cl->host_client_id, cl->me_client_id);
684 if (cl->state != MEI_FILE_CONNECTED) {
685 rets = -ENODEV;
686 dev_dbg(&dev->pdev->dev, "host client = %d, is not connected to ME client = %d",
687 cl->host_client_id,
688 cl->me_client_id);
689 goto unlock_dev;
690 }
cf9673da 691 for (i = 0; i < dev->me_clients_num; i++) {
ab841160
OW		 692 if (dev->me_clients[i].client_id ==
693 cl->me_client_id)
694 break;
695 }
696 if (WARN_ON(dev->me_clients[i].client_id != cl->me_client_id)) {
697 rets = -ENODEV;
698 goto unlock_dev;
699 }
cf9673da 700 if (i == dev->me_clients_num) {
ab841160
OW		 701 rets = -ENODEV;
702 goto unlock_dev;
703 }
704 if (length > dev->me_clients[i].props.max_msg_length || length <= 0) {
705 rets = -EINVAL;
706 goto unlock_dev;
707 }
708 write_cb->file_private = cl;
709
710 rets = mei_flow_ctrl_creds(dev, cl);
711 if (rets < 0)
712 goto unlock_dev;
713
714 if (rets && dev->mei_host_buffer_is_empty) {
715 rets = 0;
eb9af0ac 716 dev->mei_host_buffer_is_empty = false;
24aadc80
TW		 717 if (length > mei_hbuf_max_data(dev)) {
718 mei_hdr.length = mei_hbuf_max_data(dev);
ab841160
OW		 719 mei_hdr.msg_complete = 0;
720 } else {
721 mei_hdr.length = length;
722 mei_hdr.msg_complete = 1;
723 }
724 mei_hdr.host_addr = cl->host_client_id;
725 mei_hdr.me_addr = cl->me_client_id;
726 mei_hdr.reserved = 0;
727 dev_dbg(&dev->pdev->dev, "call mei_write_message header=%08x.\n",
728 *((u32 *) &mei_hdr));
1ccb7b62 729 if (mei_write_message(dev, &mei_hdr,
ab841160
OW		 730 (unsigned char *) (write_cb->request_buffer.data),
731 mei_hdr.length)) {
732 rets = -ENODEV;
733 goto unlock_dev;
734 }
735 cl->writing_state = MEI_WRITING;
736 write_cb->information = mei_hdr.length;
737 if (mei_hdr.msg_complete) {
738 if (mei_flow_ctrl_reduce(dev, cl)) {
739 rets = -ENODEV;
740 goto unlock_dev;
741 }
742 list_add_tail(&write_cb->cb_list,
743 &dev->write_waiting_list.mei_cb.cb_list);
744 } else {
745 list_add_tail(&write_cb->cb_list,
746 &dev->write_list.mei_cb.cb_list);
747 }
748
749 } else {
750
751 write_cb->information = 0;
752 cl->writing_state = MEI_WRITING;
753 list_add_tail(&write_cb->cb_list,
754 &dev->write_list.mei_cb.cb_list);
755 }
756 mutex_unlock(&dev->device_lock);
757 return length;
758
759unlock_dev:
760 mutex_unlock(&dev->device_lock);
761 mei_free_cb_private(write_cb);
762 return rets;
763}
764
765
766/**
767 * mei_ioctl - the IOCTL function
768 *
769 * @file: pointer to file structure
770 * @cmd: ioctl command
771 * @data: pointer to mei message structure
772 *
773 * returns 0 on success , <0 on error
774 */
775static long mei_ioctl(struct file *file, unsigned int cmd, unsigned long data)
776{
777 struct mei_device *dev;
778 struct mei_cl *cl = file->private_data;
779 struct mei_connect_client_data *connect_data = NULL;
780 int rets;
781
782 if (cmd != IOCTL_MEI_CONNECT_CLIENT)
783 return -EINVAL;
784
785 if (WARN_ON(!cl || !cl->dev))
786 return -ENODEV;
787
788 dev = cl->dev;
789
790 dev_dbg(&dev->pdev->dev, "IOCTL cmd = 0x%x", cmd);
791
792 mutex_lock(&dev->device_lock);
793 if (dev->mei_state != MEI_ENABLED) {
794 rets = -ENODEV;
795 goto out;
796 }
797
798 dev_dbg(&dev->pdev->dev, ": IOCTL_MEI_CONNECT_CLIENT.\n");
799
800 connect_data = kzalloc(sizeof(struct mei_connect_client_data),
801 GFP_KERNEL);
802 if (!connect_data) {
803 rets = -ENOMEM;
804 goto out;
805 }
806 dev_dbg(&dev->pdev->dev, "copy connect data from user\n");
807 if (copy_from_user(connect_data, (char __user *)data,
808 sizeof(struct mei_connect_client_data))) {
809 dev_dbg(&dev->pdev->dev, "failed to copy data from userland\n");
810 rets = -EFAULT;
811 goto out;
812 }
813 rets = mei_ioctl_connect_client(file, connect_data);
814
815 /* if all is ok, copying the data back to user. */
816 if (rets)
817 goto out;
818
819 dev_dbg(&dev->pdev->dev, "copy connect data to user\n");
820 if (copy_to_user((char __user *)data, connect_data,
821 sizeof(struct mei_connect_client_data))) {
822 dev_dbg(&dev->pdev->dev, "failed to copy data to userland\n");
823 rets = -EFAULT;
824 goto out;
825 }
826
827out:
828 kfree(connect_data);
829 mutex_unlock(&dev->device_lock);
830 return rets;
831}
832
833/**
834 * mei_compat_ioctl - the compat IOCTL function
835 *
836 * @file: pointer to file structure
837 * @cmd: ioctl command
838 * @data: pointer to mei message structure
839 *
840 * returns 0 on success , <0 on error
841 */
842#ifdef CONFIG_COMPAT
843static long mei_compat_ioctl(struct file *file,
441ab50f 844 unsigned int cmd, unsigned long data)
ab841160
OW		 845{
846 return mei_ioctl(file, cmd, (unsigned long)compat_ptr(data));
847}
848#endif
849
850
851/**
852 * mei_poll - the poll function
853 *
854 * @file: pointer to file structure
855 * @wait: pointer to poll_table structure
856 *
857 * returns poll mask
858 */
859static unsigned int mei_poll(struct file *file, poll_table *wait)
860{
861 struct mei_cl *cl = file->private_data;
862 struct mei_device *dev;
863 unsigned int mask = 0;
864
865 if (WARN_ON(!cl || !cl->dev))
866 return mask;
867
868 dev = cl->dev;
869
870 mutex_lock(&dev->device_lock);
871
872 if (dev->mei_state != MEI_ENABLED)
873 goto out;
874
875
876 if (cl == &dev->iamthif_cl) {
877 mutex_unlock(&dev->device_lock);
878 poll_wait(file, &dev->iamthif_cl.wait, wait);
879 mutex_lock(&dev->device_lock);
880 if (dev->iamthif_state == MEI_IAMTHIF_READ_COMPLETE &&
881 dev->iamthif_file_object == file) {
882 mask |= (POLLIN | POLLRDNORM);
883 dev_dbg(&dev->pdev->dev, "run next amthi cb\n");
c95efb74 884 mei_run_next_iamthif_cmd(dev);
ab841160
OW		 885 }
886 goto out;
887 }
888
889 mutex_unlock(&dev->device_lock);
890 poll_wait(file, &cl->tx_wait, wait);
891 mutex_lock(&dev->device_lock);
892 if (MEI_WRITE_COMPLETE == cl->writing_state)
893 mask |= (POLLIN | POLLRDNORM);
894
895out:
896 mutex_unlock(&dev->device_lock);
897 return mask;
898}
899
5b881e3c
OW		 900/*
901 * file operations structure will be used for mei char device.
902 */
903static const struct file_operations mei_fops = {
904 .owner = THIS_MODULE,
905 .read = mei_read,
906 .unlocked_ioctl = mei_ioctl,
907#ifdef CONFIG_COMPAT
908 .compat_ioctl = mei_compat_ioctl,
909#endif
910 .open = mei_open,
911 .release = mei_release,
912 .write = mei_write,
913 .poll = mei_poll,
914 .llseek = no_llseek
915};
916
917
918/*
919 * Misc Device Struct
920 */
921static struct miscdevice mei_misc_device = {
c38ea24e 922 .name = "mei",
5b881e3c
OW		 923 .fops = &mei_fops,
924 .minor = MISC_DYNAMIC_MINOR,
925};
926
927/**
928 * mei_probe - Device Initialization Routine
929 *
930 * @pdev: PCI device structure
931 * @ent: entry in kcs_pci_tbl
932 *
933 * returns 0 on success, <0 on failure.
934 */
935static int __devinit mei_probe(struct pci_dev *pdev,
936 const struct pci_device_id *ent)
937{
938 struct mei_device *dev;
939 int err;
940
941 mutex_lock(&mei_mutex);
942 if (mei_device) {
943 err = -EEXIST;
944 goto end;
945 }
946 /* enable pci dev */
947 err = pci_enable_device(pdev);
948 if (err) {
32c826b6 949 dev_err(&pdev->dev, "failed to enable pci device.\n");
5b881e3c
OW		 950 goto end;
951 }
952 /* set PCI host mastering */
953 pci_set_master(pdev);
954 /* pci request regions for mei driver */
955 err = pci_request_regions(pdev, mei_driver_name);
956 if (err) {
32c826b6 957 dev_err(&pdev->dev, "failed to get pci regions.\n");
5b881e3c
OW		 958 goto disable_device;
959 }
960 /* allocates and initializes the mei dev structure */
961 dev = mei_device_init(pdev);
962 if (!dev) {
963 err = -ENOMEM;
964 goto release_regions;
965 }
966 /* mapping IO device memory */
967 dev->mem_addr = pci_iomap(pdev, 0, 0);
968 if (!dev->mem_addr) {
32c826b6 969 dev_err(&pdev->dev, "mapping I/O device memory failure.\n");
5b881e3c
OW		 970 err = -ENOMEM;
971 goto free_device;
972 }
973 pci_enable_msi(pdev);
974
975 /* request and enable interrupt */
976 if (pci_dev_msi_enabled(pdev))
977 err = request_threaded_irq(pdev->irq,
978 NULL,
979 mei_interrupt_thread_handler,
aa189ecd 980 IRQF_ONESHOT, mei_driver_name, dev);
5b881e3c
OW		 981 else
982 err = request_threaded_irq(pdev->irq,
983 mei_interrupt_quick_handler,
984 mei_interrupt_thread_handler,
985 IRQF_SHARED, mei_driver_name, dev);
986
987 if (err) {
32c826b6 988 dev_err(&pdev->dev, "request_threaded_irq failure. irq = %d\n",
5b881e3c 989 pdev->irq);
169dc388 990 goto disable_msi;
5b881e3c
OW		 991 }
992 INIT_DELAYED_WORK(&dev->timer_work, mei_timer);
993 if (mei_hw_init(dev)) {
32c826b6 994 dev_err(&pdev->dev, "init hw failure.\n");
5b881e3c
OW		 995 err = -ENODEV;
996 goto release_irq;
997 }
998
999 err = misc_register(&mei_misc_device);
1000 if (err)
1001 goto release_irq;
1002
1003 mei_device = pdev;
1004 pci_set_drvdata(pdev, dev);
1005
1006
1007 schedule_delayed_work(&dev->timer_work, HZ);
1008
1009 mutex_unlock(&mei_mutex);
1010
2f3d2b49 1011 pr_debug("initialization successful.\n");
5b881e3c
OW		 1012
1013 return 0;
1014
1015release_irq:
1016 /* disable interrupts */
1017 dev->host_hw_state = mei_hcsr_read(dev);
1018 mei_disable_interrupts(dev);
1019 flush_scheduled_work();
1020 free_irq(pdev->irq, dev);
169dc388 1021disable_msi:
5b881e3c 1022 pci_disable_msi(pdev);
5b881e3c
OW		 1023 pci_iounmap(pdev, dev->mem_addr);
1024free_device:
1025 kfree(dev);
1026release_regions:
1027 pci_release_regions(pdev);
1028disable_device:
1029 pci_disable_device(pdev);
1030end:
1031 mutex_unlock(&mei_mutex);
32c826b6 1032 dev_err(&pdev->dev, "initialization failed.\n");
5b881e3c
OW		 1033 return err;
1034}
1035
1036/**
1037 * mei_remove - Device Removal Routine
1038 *
1039 * @pdev: PCI device structure
1040 *
1041 * mei_remove is called by the PCI subsystem to alert the driver
1042 * that it should release a PCI device.
1043 */
1044static void __devexit mei_remove(struct pci_dev *pdev)
1045{
1046 struct mei_device *dev;
1047
1048 if (mei_device != pdev)
1049 return;
1050
1051 dev = pci_get_drvdata(pdev);
1052 if (!dev)
1053 return;
1054
1055 mutex_lock(&dev->device_lock);
1056
1057 mei_wd_stop(dev, false);
1058
1059 mei_device = NULL;
1060
1061 if (dev->iamthif_cl.state == MEI_FILE_CONNECTED) {
1062 dev->iamthif_cl.state = MEI_FILE_DISCONNECTING;
1063 mei_disconnect_host_client(dev, &dev->iamthif_cl);
1064 }
1065 if (dev->wd_cl.state == MEI_FILE_CONNECTED) {
1066 dev->wd_cl.state = MEI_FILE_DISCONNECTING;
1067 mei_disconnect_host_client(dev, &dev->wd_cl);
1068 }
1069
1070 /* Unregistering watchdog device */
70cd5337 1071 mei_watchdog_unregister(dev);
5b881e3c
OW		 1072
1073 /* remove entry if already in list */
1074 dev_dbg(&pdev->dev, "list del iamthif and wd file list.\n");
1075 mei_remove_client_from_file_list(dev, dev->wd_cl.host_client_id);
1076 mei_remove_client_from_file_list(dev, dev->iamthif_cl.host_client_id);
1077
1078 dev->iamthif_current_cb = NULL;
1079 dev->me_clients_num = 0;
1080
1081 mutex_unlock(&dev->device_lock);
1082
1083 flush_scheduled_work();
1084
1085 /* disable interrupts */
1086 mei_disable_interrupts(dev);
1087
1088 free_irq(pdev->irq, dev);
1089 pci_disable_msi(pdev);
1090 pci_set_drvdata(pdev, NULL);
1091
1092 if (dev->mem_addr)
1093 pci_iounmap(pdev, dev->mem_addr);
1094
1095 kfree(dev);
1096
1097 pci_release_regions(pdev);
1098 pci_disable_device(pdev);
a44cab4a
TW		 1099
1100 misc_deregister(&mei_misc_device);
5b881e3c 1101}
ab841160
OW		 1102#ifdef CONFIG_PM
1103static int mei_pci_suspend(struct device *device)
1104{
1105 struct pci_dev *pdev = to_pci_dev(device);
1106 struct mei_device *dev = pci_get_drvdata(pdev);
1107 int err;
1108
1109 if (!dev)
1110 return -ENODEV;
1111 mutex_lock(&dev->device_lock);
1112 /* Stop watchdog if exists */
1113 err = mei_wd_stop(dev, true);
1114 /* Set new mei state */
1115 if (dev->mei_state == MEI_ENABLED ||
1116 dev->mei_state == MEI_RECOVERING_FROM_RESET) {
1117 dev->mei_state = MEI_POWER_DOWN;
1118 mei_reset(dev, 0);
1119 }
1120 mutex_unlock(&dev->device_lock);
1121
1122 free_irq(pdev->irq, dev);
4f61a7ad 1123 pci_disable_msi(pdev);
ab841160
OW		 1124
1125 return err;
1126}
1127
1128static int mei_pci_resume(struct device *device)
1129{
1130 struct pci_dev *pdev = to_pci_dev(device);
1131 struct mei_device *dev;
1132 int err;
1133
1134 dev = pci_get_drvdata(pdev);
1135 if (!dev)
1136 return -ENODEV;
1137
4f61a7ad
TW		 1138 pci_enable_msi(pdev);
1139
1140 /* request and enable interrupt */
1141 if (pci_dev_msi_enabled(pdev))
1142 err = request_threaded_irq(pdev->irq,
1143 NULL,
1144 mei_interrupt_thread_handler,
16a50b12 1145 IRQF_ONESHOT, mei_driver_name, dev);
4f61a7ad
TW		 1146 else
1147 err = request_threaded_irq(pdev->irq,
ab841160
OW		 1148 mei_interrupt_quick_handler,
1149 mei_interrupt_thread_handler,
1150 IRQF_SHARED, mei_driver_name, dev);
4f61a7ad 1151
ab841160 1152 if (err) {
32c826b6
TW		 1153 dev_err(&pdev->dev, "request_threaded_irq failed: irq = %d.\n",
1154 pdev->irq);
ab841160
OW		 1155 return err;
1156 }
1157
1158 mutex_lock(&dev->device_lock);
1159 dev->mei_state = MEI_POWER_UP;
1160 mei_reset(dev, 1);
1161 mutex_unlock(&dev->device_lock);
1162
6d70e935
OW		 1163 /* Start timer if stopped in suspend */
1164 schedule_delayed_work(&dev->timer_work, HZ);
1165
ab841160
OW		 1166 return err;
1167}
1168static SIMPLE_DEV_PM_OPS(mei_pm_ops, mei_pci_suspend, mei_pci_resume);
1169#define MEI_PM_OPS (&mei_pm_ops)
1170#else
2d990362 1171#define MEI_PM_OPS NULL
ab841160
OW		 1172#endif /* CONFIG_PM */
1173/*
1174 * PCI driver structure
1175 */
1176static struct pci_driver mei_driver = {
1177 .name = mei_driver_name,
1178 .id_table = mei_pci_tbl,
1179 .probe = mei_probe,
1180 .remove = __devexit_p(mei_remove),
1181 .shutdown = __devexit_p(mei_remove),
1182 .driver.pm = MEI_PM_OPS,
1183};
1184
ab841160
OW		 1185/**
1186 * mei_init_module - Driver Registration Routine
1187 *
1188 * mei_init_module is the first routine called when the driver is
1189 * loaded. All it does is to register with the PCI subsystem.
1190 *
1191 * returns 0 on success, <0 on failure.
1192 */
1193static int __init mei_init_module(void)
1194{
1195 int ret;
1196
2f3d2b49 1197 pr_debug("loading.\n");
ab841160
OW		 1198 /* init pci module */
1199 ret = pci_register_driver(&mei_driver);
5b881e3c 1200 if (ret < 0)
37421275 1201 pr_err("error registering driver.\n");
ab841160 1202
ab841160
OW		 1203 return ret;
1204}
1205
1206module_init(mei_init_module);
1207
1208/**
1209 * mei_exit_module - Driver Exit Cleanup Routine
1210 *
1211 * mei_exit_module is called just before the driver is removed
1212 * from memory.
1213 */
1214static void __exit mei_exit_module(void)
1215{
cbecb8bf 1216 pci_unregister_driver(&mei_driver);
ab841160 1217
2f3d2b49 1218 pr_debug("unloaded successfully.\n");
ab841160
OW		 1219}
1220
1221module_exit(mei_exit_module);
1222
1223
1224MODULE_AUTHOR("Intel Corporation");
1225MODULE_DESCRIPTION("Intel(R) Management Engine Interface");
1226MODULE_LICENSE("GPL v2");
Linux kernel - Deliverables
This page took 0.31054 seconds and 5 git commands to generate.