2 * Copyright (C) 2018 Lorenzo Bianconi <lorenzo.bianconi83@gmail.com>
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 #include <linux/module.h>
18 #include <linux/firmware.h>
21 #include "mt76x02_dma.h"
22 #include "mt76x02_mcu.h"
23 #include "mt76x02_usb.h"
25 #define MT_CMD_HDR_LEN 4
27 #define MT_FCE_DMA_ADDR 0x0230
28 #define MT_FCE_DMA_LEN 0x0234
30 #define MT_TX_CPU_FROM_FCE_CPU_DESC_IDX 0x09a8
32 static struct sk_buff *
33 mt76x02u_mcu_msg_alloc(const void *data, int len)
37 skb = alloc_skb(MT_CMD_HDR_LEN + len + 8, GFP_KERNEL);
41 skb_reserve(skb, MT_CMD_HDR_LEN);
42 skb_put_data(skb, data, len);
48 mt76x02u_multiple_mcu_reads(struct mt76_dev *dev, u8 *data, int len)
50 struct mt76_usb *usb = &dev->usb;
55 WARN_ON_ONCE(len / 4 != usb->mcu.rp_len);
57 reg = usb->mcu.rp[0].reg - usb->mcu.base;
58 for (i = 0; i < usb->mcu.rp_len; i++) {
59 val = get_unaligned_le32(data + 4 * i);
60 usb->mcu.rp[i].reg = reg++;
61 usb->mcu.rp[i].value = val;
64 WARN_ON_ONCE(len / 8 != usb->mcu.rp_len);
66 for (i = 0; i < usb->mcu.rp_len; i++) {
67 reg = get_unaligned_le32(data + 8 * i) -
69 val = get_unaligned_le32(data + 8 * i + 4);
71 WARN_ON_ONCE(usb->mcu.rp[i].reg != reg);
72 usb->mcu.rp[i].value = val;
77 static int mt76x02u_mcu_wait_resp(struct mt76_dev *dev, u8 seq)
79 struct mt76_usb *usb = &dev->usb;
80 struct mt76u_buf *buf = &usb->mcu.res;
81 struct urb *urb = buf->urb;
86 for (i = 0; i < 5; i++) {
87 if (!wait_for_completion_timeout(&usb->mcu.cmpl,
88 msecs_to_jiffies(300)))
94 data = sg_virt(&urb->sg[0]);
96 mt76x02u_multiple_mcu_reads(dev, data + 4,
97 urb->actual_length - 8);
99 rxfce = get_unaligned_le32(data);
100 ret = mt76u_submit_buf(dev, USB_DIR_IN,
103 mt76u_mcu_complete_urb,
108 if (seq == FIELD_GET(MT_RX_FCE_INFO_CMD_SEQ, rxfce) &&
109 FIELD_GET(MT_RX_FCE_INFO_EVT_TYPE, rxfce) == EVT_CMD_DONE)
112 dev_err(dev->dev, "error: MCU resp evt:%lx seq:%hhx-%lx\n",
113 FIELD_GET(MT_RX_FCE_INFO_EVT_TYPE, rxfce),
114 seq, FIELD_GET(MT_RX_FCE_INFO_CMD_SEQ, rxfce));
117 dev_err(dev->dev, "error: %s timed out\n", __func__);
122 __mt76x02u_mcu_send_msg(struct mt76_dev *dev, struct sk_buff *skb,
123 int cmd, bool wait_resp)
125 struct usb_interface *intf = to_usb_interface(dev->dev);
126 struct usb_device *udev = interface_to_usbdev(intf);
127 struct mt76_usb *usb = &dev->usb;
136 if (test_bit(MT76_REMOVED, &dev->state))
139 pipe = usb_sndbulkpipe(udev, usb->out_ep[MT_EP_OUT_INBAND_CMD]);
141 seq = ++usb->mcu.msg_seq & 0xf;
143 seq = ++usb->mcu.msg_seq & 0xf;
146 info = FIELD_PREP(MT_MCU_MSG_CMD_SEQ, seq) |
147 FIELD_PREP(MT_MCU_MSG_CMD_TYPE, cmd) |
149 ret = mt76x02u_skb_dma_info(skb, CPU_TX_PORT, info);
153 ret = usb_bulk_msg(udev, pipe, skb->data, skb->len, &sent, 500);
158 ret = mt76x02u_mcu_wait_resp(dev, seq);
166 mt76x02u_mcu_send_msg(struct mt76_dev *dev, struct sk_buff *skb,
167 int cmd, bool wait_resp)
169 struct mt76_usb *usb = &dev->usb;
172 mutex_lock(&usb->mcu.mutex);
173 err = __mt76x02u_mcu_send_msg(dev, skb, cmd, wait_resp);
174 mutex_unlock(&usb->mcu.mutex);
179 static inline void skb_put_le32(struct sk_buff *skb, u32 val)
181 put_unaligned_le32(val, skb_put(skb, 4));
185 mt76x02u_mcu_wr_rp(struct mt76_dev *dev, u32 base,
186 const struct mt76_reg_pair *data, int n)
188 const int CMD_RANDOM_WRITE = 12;
189 const int max_vals_per_cmd = MT_INBAND_PACKET_MAX_LEN / 8;
196 cnt = min(max_vals_per_cmd, n);
198 skb = alloc_skb(cnt * 8 + MT_DMA_HDR_LEN + 4, GFP_KERNEL);
201 skb_reserve(skb, MT_DMA_HDR_LEN);
203 for (i = 0; i < cnt; i++) {
204 skb_put_le32(skb, base + data[i].reg);
205 skb_put_le32(skb, data[i].value);
208 ret = mt76x02u_mcu_send_msg(dev, skb, CMD_RANDOM_WRITE, cnt == n);
212 return mt76x02u_mcu_wr_rp(dev, base, data + cnt, n - cnt);
216 mt76x02u_mcu_rd_rp(struct mt76_dev *dev, u32 base,
217 struct mt76_reg_pair *data, int n)
219 const int CMD_RANDOM_READ = 10;
220 const int max_vals_per_cmd = MT_INBAND_PACKET_MAX_LEN / 8;
221 struct mt76_usb *usb = &dev->usb;
228 cnt = min(max_vals_per_cmd, n);
232 skb = alloc_skb(cnt * 8 + MT_DMA_HDR_LEN + 4, GFP_KERNEL);
235 skb_reserve(skb, MT_DMA_HDR_LEN);
237 for (i = 0; i < cnt; i++) {
238 skb_put_le32(skb, base + data[i].reg);
239 skb_put_le32(skb, data[i].value);
242 mutex_lock(&usb->mcu.mutex);
246 usb->mcu.base = base;
247 usb->mcu.burst = false;
249 ret = __mt76x02u_mcu_send_msg(dev, skb, CMD_RANDOM_READ, true);
253 mutex_unlock(&usb->mcu.mutex);
258 void mt76x02u_mcu_fw_reset(struct mt76_dev *dev)
260 mt76u_vendor_request(dev, MT_VEND_DEV_MODE,
261 USB_DIR_OUT | USB_TYPE_VENDOR,
264 EXPORT_SYMBOL_GPL(mt76x02u_mcu_fw_reset);
267 __mt76x02u_mcu_fw_send_data(struct mt76_dev *dev, struct mt76u_buf *buf,
268 const void *fw_data, int len, u32 dst_addr)
270 u8 *data = sg_virt(&buf->urb->sg[0]);
271 DECLARE_COMPLETION_ONSTACK(cmpl);
276 info = cpu_to_le32(FIELD_PREP(MT_MCU_MSG_PORT, CPU_TX_PORT) |
277 FIELD_PREP(MT_MCU_MSG_LEN, len) |
278 MT_MCU_MSG_TYPE_CMD);
280 memcpy(data, &info, sizeof(info));
281 memcpy(data + sizeof(info), fw_data, len);
282 memset(data + sizeof(info) + len, 0, 4);
284 mt76u_single_wr(dev, MT_VEND_WRITE_FCE,
285 MT_FCE_DMA_ADDR, dst_addr);
286 len = roundup(len, 4);
287 mt76u_single_wr(dev, MT_VEND_WRITE_FCE,
288 MT_FCE_DMA_LEN, len << 16);
290 buf->len = MT_CMD_HDR_LEN + len + sizeof(info);
291 err = mt76u_submit_buf(dev, USB_DIR_OUT,
292 MT_EP_OUT_INBAND_CMD,
294 mt76u_mcu_complete_urb, &cmpl);
298 if (!wait_for_completion_timeout(&cmpl,
299 msecs_to_jiffies(1000))) {
300 dev_err(dev->dev, "firmware upload timed out\n");
301 usb_kill_urb(buf->urb);
305 if (mt76u_urb_error(buf->urb)) {
306 dev_err(dev->dev, "firmware upload failed: %d\n",
308 return buf->urb->status;
311 val = mt76u_rr(dev, MT_TX_CPU_FROM_FCE_CPU_DESC_IDX);
313 mt76u_wr(dev, MT_TX_CPU_FROM_FCE_CPU_DESC_IDX, val);
318 int mt76x02u_mcu_fw_send_data(struct mt76_dev *dev, const void *data,
319 int data_len, u32 max_payload, u32 offset)
321 int err, len, pos = 0, max_len = max_payload - 8;
322 struct mt76u_buf buf;
324 err = mt76u_buf_alloc(dev, &buf, 1, max_payload, max_payload,
329 while (data_len > 0) {
330 len = min_t(int, data_len, max_len);
331 err = __mt76x02u_mcu_fw_send_data(dev, &buf, data + pos,
338 usleep_range(5000, 10000);
340 mt76u_buf_free(&buf);
344 EXPORT_SYMBOL_GPL(mt76x02u_mcu_fw_send_data);
346 void mt76x02u_init_mcu(struct mt76_dev *dev)
348 static const struct mt76_mcu_ops mt76x02u_mcu_ops = {
349 .mcu_msg_alloc = mt76x02u_mcu_msg_alloc,
350 .mcu_send_msg = mt76x02u_mcu_send_msg,
351 .mcu_wr_rp = mt76x02u_mcu_wr_rp,
352 .mcu_rd_rp = mt76x02u_mcu_rd_rp,
355 dev->mcu_ops = &mt76x02u_mcu_ops;
357 EXPORT_SYMBOL_GPL(mt76x02u_init_mcu);
359 MODULE_AUTHOR("Lorenzo Bianconi <lorenzo.bianconi83@gmail.com>");
360 MODULE_LICENSE("Dual BSD/GPL");