1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69#include <linux/firmware.h>
70#include <linux/rtnetlink.h>
71#include "iwl-trans.h"
72#include "iwl-csr.h"
73#include "mvm.h"
74#include "iwl-eeprom-parse.h"
75#include "iwl-eeprom-read.h"
76#include "iwl-nvm-parse.h"
77#include "iwl-prph.h"
78#include "fw/acpi.h"
79
80
81#define IWL_NVM_DEFAULT_CHUNK_SIZE (2 * 1024)
82
83#define NVM_WRITE_OPCODE 1
84#define NVM_READ_OPCODE 0
85
86
87enum {
88 READ_NVM_CHUNK_SUCCEED = 0,
89 READ_NVM_CHUNK_NOT_VALID_ADDRESS = 1
90};
91
92
93
94
95
96static int iwl_nvm_write_chunk(struct iwl_mvm *mvm, u16 section,
97 u16 offset, u16 length, const u8 *data)
98{
99 struct iwl_nvm_access_cmd nvm_access_cmd = {
100 .offset = cpu_to_le16(offset),
101 .length = cpu_to_le16(length),
102 .type = cpu_to_le16(section),
103 .op_code = NVM_WRITE_OPCODE,
104 };
105 struct iwl_host_cmd cmd = {
106 .id = NVM_ACCESS_CMD,
107 .len = { sizeof(struct iwl_nvm_access_cmd), length },
108 .flags = CMD_WANT_SKB | CMD_SEND_IN_RFKILL,
109 .data = { &nvm_access_cmd, data },
110
111 .dataflags = { 0, IWL_HCMD_DFL_DUP },
112 };
113 struct iwl_rx_packet *pkt;
114 struct iwl_nvm_access_resp *nvm_resp;
115 int ret;
116
117 ret = iwl_mvm_send_cmd(mvm, &cmd);
118 if (ret)
119 return ret;
120
121 pkt = cmd.resp_pkt;
122
123 nvm_resp = (void *)pkt->data;
124 if (le16_to_cpu(nvm_resp->status) != READ_NVM_CHUNK_SUCCEED) {
125 IWL_ERR(mvm,
126 "NVM access write command failed for section %u (status = 0x%x)\n",
127 section, le16_to_cpu(nvm_resp->status));
128 ret = -EIO;
129 }
130
131 iwl_free_resp(&cmd);
132 return ret;
133}
134
135static int iwl_nvm_read_chunk(struct iwl_mvm *mvm, u16 section,
136 u16 offset, u16 length, u8 *data)
137{
138 struct iwl_nvm_access_cmd nvm_access_cmd = {
139 .offset = cpu_to_le16(offset),
140 .length = cpu_to_le16(length),
141 .type = cpu_to_le16(section),
142 .op_code = NVM_READ_OPCODE,
143 };
144 struct iwl_nvm_access_resp *nvm_resp;
145 struct iwl_rx_packet *pkt;
146 struct iwl_host_cmd cmd = {
147 .id = NVM_ACCESS_CMD,
148 .flags = CMD_WANT_SKB | CMD_SEND_IN_RFKILL,
149 .data = { &nvm_access_cmd, },
150 };
151 int ret, bytes_read, offset_read;
152 u8 *resp_data;
153
154 cmd.len[0] = sizeof(struct iwl_nvm_access_cmd);
155
156 ret = iwl_mvm_send_cmd(mvm, &cmd);
157 if (ret)
158 return ret;
159
160 pkt = cmd.resp_pkt;
161
162
163 nvm_resp = (void *)pkt->data;
164 ret = le16_to_cpu(nvm_resp->status);
165 bytes_read = le16_to_cpu(nvm_resp->length);
166 offset_read = le16_to_cpu(nvm_resp->offset);
167 resp_data = nvm_resp->data;
168 if (ret) {
169 if ((offset != 0) &&
170 (ret == READ_NVM_CHUNK_NOT_VALID_ADDRESS)) {
171
172
173
174
175
176
177
178
179 IWL_DEBUG_EEPROM(mvm->trans->dev,
180 "NVM access command failed on offset 0x%x since that section size is multiple 2K\n",
181 offset);
182 ret = 0;
183 } else {
184 IWL_DEBUG_EEPROM(mvm->trans->dev,
185 "NVM access command failed with status %d (device: %s)\n",
186 ret, mvm->cfg->name);
187 ret = -EIO;
188 }
189 goto exit;
190 }
191
192 if (offset_read != offset) {
193 IWL_ERR(mvm, "NVM ACCESS response with invalid offset %d\n",
194 offset_read);
195 ret = -EINVAL;
196 goto exit;
197 }
198
199
200 memcpy(data + offset, resp_data, bytes_read);
201 ret = bytes_read;
202
203exit:
204 iwl_free_resp(&cmd);
205 return ret;
206}
207
208static int iwl_nvm_write_section(struct iwl_mvm *mvm, u16 section,
209 const u8 *data, u16 length)
210{
211 int offset = 0;
212
213
214
215 while (offset < length) {
216 int chunk_size, ret;
217
218 chunk_size = min(IWL_NVM_DEFAULT_CHUNK_SIZE,
219 length - offset);
220
221 ret = iwl_nvm_write_chunk(mvm, section, offset,
222 chunk_size, data + offset);
223 if (ret < 0)
224 return ret;
225
226 offset += chunk_size;
227 }
228
229 return 0;
230}
231
232
233
234
235
236
237
238
239
240
241
242static int iwl_nvm_read_section(struct iwl_mvm *mvm, u16 section,
243 u8 *data, u32 size_read)
244{
245 u16 length, offset = 0;
246 int ret;
247
248
249 length = IWL_NVM_DEFAULT_CHUNK_SIZE;
250
251 ret = length;
252
253
254 while (ret == length) {
255
256 if ((size_read + offset + length) >
257 mvm->cfg->base_params->eeprom_size) {
258 IWL_ERR(mvm, "EEPROM size is too small for NVM\n");
259 return -ENOBUFS;
260 }
261
262 ret = iwl_nvm_read_chunk(mvm, section, offset, length, data);
263 if (ret < 0) {
264 IWL_DEBUG_EEPROM(mvm->trans->dev,
265 "Cannot read NVM from section %d offset %d, length %d\n",
266 section, offset, length);
267 return ret;
268 }
269 offset += ret;
270 }
271
272 iwl_nvm_fixups(mvm->trans->hw_id, section, data, offset);
273
274 IWL_DEBUG_EEPROM(mvm->trans->dev,
275 "NVM section %d read completed\n", section);
276 return offset;
277}
278
279static struct iwl_nvm_data *
280iwl_parse_nvm_sections(struct iwl_mvm *mvm)
281{
282 struct iwl_nvm_section *sections = mvm->nvm_sections;
283 const __be16 *hw;
284 const __le16 *sw, *calib, *regulatory, *mac_override, *phy_sku;
285 bool lar_enabled;
286 int regulatory_type;
287
288
289 if (mvm->trans->cfg->nvm_type != IWL_NVM_EXT) {
290 if (!mvm->nvm_sections[NVM_SECTION_TYPE_SW].data ||
291 !mvm->nvm_sections[mvm->cfg->nvm_hw_section_num].data) {
292 IWL_ERR(mvm, "Can't parse empty OTP/NVM sections\n");
293 return NULL;
294 }
295 } else {
296 if (mvm->trans->cfg->nvm_type == IWL_NVM_SDP)
297 regulatory_type = NVM_SECTION_TYPE_REGULATORY_SDP;
298 else
299 regulatory_type = NVM_SECTION_TYPE_REGULATORY;
300
301
302 if (!mvm->nvm_sections[NVM_SECTION_TYPE_SW].data ||
303 !mvm->nvm_sections[regulatory_type].data) {
304 IWL_ERR(mvm,
305 "Can't parse empty family 8000 OTP/NVM sections\n");
306 return NULL;
307 }
308
309 if (!mvm->nvm_sections[mvm->cfg->nvm_hw_section_num].data &&
310 !mvm->nvm_sections[NVM_SECTION_TYPE_MAC_OVERRIDE].data) {
311 IWL_ERR(mvm,
312 "Can't parse mac_address, empty sections\n");
313 return NULL;
314 }
315
316
317 if (!mvm->nvm_sections[NVM_SECTION_TYPE_PHY_SKU].data) {
318 IWL_ERR(mvm,
319 "Can't parse phy_sku in B0, empty sections\n");
320 return NULL;
321 }
322 }
323
324 hw = (const __be16 *)sections[mvm->cfg->nvm_hw_section_num].data;
325 sw = (const __le16 *)sections[NVM_SECTION_TYPE_SW].data;
326 calib = (const __le16 *)sections[NVM_SECTION_TYPE_CALIBRATION].data;
327 mac_override =
328 (const __le16 *)sections[NVM_SECTION_TYPE_MAC_OVERRIDE].data;
329 phy_sku = (const __le16 *)sections[NVM_SECTION_TYPE_PHY_SKU].data;
330
331 regulatory = mvm->trans->cfg->nvm_type == IWL_NVM_SDP ?
332 (const __le16 *)sections[NVM_SECTION_TYPE_REGULATORY_SDP].data :
333 (const __le16 *)sections[NVM_SECTION_TYPE_REGULATORY].data;
334
335 lar_enabled = !iwlwifi_mod_params.lar_disable &&
336 fw_has_capa(&mvm->fw->ucode_capa,
337 IWL_UCODE_TLV_CAPA_LAR_SUPPORT);
338
339 return iwl_parse_nvm_data(mvm->trans, mvm->cfg, hw, sw, calib,
340 regulatory, mac_override, phy_sku,
341 mvm->fw->valid_tx_ant, mvm->fw->valid_rx_ant,
342 lar_enabled);
343}
344
345
346int iwl_mvm_load_nvm_to_nic(struct iwl_mvm *mvm)
347{
348 int i, ret = 0;
349 struct iwl_nvm_section *sections = mvm->nvm_sections;
350
351 IWL_DEBUG_EEPROM(mvm->trans->dev, "'Write to NVM\n");
352
353 for (i = 0; i < ARRAY_SIZE(mvm->nvm_sections); i++) {
354 if (!mvm->nvm_sections[i].data || !mvm->nvm_sections[i].length)
355 continue;
356 ret = iwl_nvm_write_section(mvm, i, sections[i].data,
357 sections[i].length);
358 if (ret < 0) {
359 IWL_ERR(mvm, "iwl_mvm_send_cmd failed: %d\n", ret);
360 break;
361 }
362 }
363 return ret;
364}
365
366int iwl_nvm_init(struct iwl_mvm *mvm)
367{
368 int ret, section;
369 u32 size_read = 0;
370 u8 *nvm_buffer, *temp;
371 const char *nvm_file_C = mvm->cfg->default_nvm_file_C_step;
372
373 if (WARN_ON_ONCE(mvm->cfg->nvm_hw_section_num >= NVM_MAX_NUM_SECTIONS))
374 return -EINVAL;
375
376
377
378 IWL_DEBUG_EEPROM(mvm->trans->dev, "Read from NVM\n");
379
380 nvm_buffer = kmalloc(mvm->cfg->base_params->eeprom_size,
381 GFP_KERNEL);
382 if (!nvm_buffer)
383 return -ENOMEM;
384 for (section = 0; section < NVM_MAX_NUM_SECTIONS; section++) {
385
386 ret = iwl_nvm_read_section(mvm, section, nvm_buffer,
387 size_read);
388 if (ret < 0)
389 continue;
390 size_read += ret;
391 temp = kmemdup(nvm_buffer, ret, GFP_KERNEL);
392 if (!temp) {
393 ret = -ENOMEM;
394 break;
395 }
396
397 iwl_nvm_fixups(mvm->trans->hw_id, section, temp, ret);
398
399 mvm->nvm_sections[section].data = temp;
400 mvm->nvm_sections[section].length = ret;
401
402#ifdef CONFIG_IWLWIFI_DEBUGFS
403 switch (section) {
404 case NVM_SECTION_TYPE_SW:
405 mvm->nvm_sw_blob.data = temp;
406 mvm->nvm_sw_blob.size = ret;
407 break;
408 case NVM_SECTION_TYPE_CALIBRATION:
409 mvm->nvm_calib_blob.data = temp;
410 mvm->nvm_calib_blob.size = ret;
411 break;
412 case NVM_SECTION_TYPE_PRODUCTION:
413 mvm->nvm_prod_blob.data = temp;
414 mvm->nvm_prod_blob.size = ret;
415 break;
416 case NVM_SECTION_TYPE_PHY_SKU:
417 mvm->nvm_phy_sku_blob.data = temp;
418 mvm->nvm_phy_sku_blob.size = ret;
419 break;
420 default:
421 if (section == mvm->cfg->nvm_hw_section_num) {
422 mvm->nvm_hw_blob.data = temp;
423 mvm->nvm_hw_blob.size = ret;
424 break;
425 }
426 }
427#endif
428 }
429 if (!size_read)
430 IWL_ERR(mvm, "OTP is blank\n");
431 kfree(nvm_buffer);
432
433
434 if (mvm->nvm_file_name) {
435
436 ret = iwl_read_external_nvm(mvm->trans, mvm->nvm_file_name,
437 mvm->nvm_sections);
438 if (ret) {
439 mvm->nvm_file_name = nvm_file_C;
440
441 if ((ret == -EFAULT || ret == -ENOENT) &&
442 mvm->nvm_file_name) {
443
444 ret = iwl_read_external_nvm(mvm->trans,
445 mvm->nvm_file_name,
446 mvm->nvm_sections);
447 if (ret)
448 return ret;
449 } else {
450 return ret;
451 }
452 }
453 }
454
455
456 mvm->nvm_data = iwl_parse_nvm_sections(mvm);
457 if (!mvm->nvm_data)
458 return -ENODATA;
459 IWL_DEBUG_EEPROM(mvm->trans->dev, "nvm version = %x\n",
460 mvm->nvm_data->nvm_version);
461
462 return 0;
463}
464
465struct iwl_mcc_update_resp *
466iwl_mvm_update_mcc(struct iwl_mvm *mvm, const char *alpha2,
467 enum iwl_mcc_source src_id)
468{
469 struct iwl_mcc_update_cmd mcc_update_cmd = {
470 .mcc = cpu_to_le16(alpha2[0] << 8 | alpha2[1]),
471 .source_id = (u8)src_id,
472 };
473 struct iwl_mcc_update_resp *resp_cp;
474 struct iwl_rx_packet *pkt;
475 struct iwl_host_cmd cmd = {
476 .id = MCC_UPDATE_CMD,
477 .flags = CMD_WANT_SKB,
478 .data = { &mcc_update_cmd },
479 };
480
481 int ret;
482 u32 status;
483 int resp_len, n_channels;
484 u16 mcc;
485 bool resp_v2 = fw_has_capa(&mvm->fw->ucode_capa,
486 IWL_UCODE_TLV_CAPA_LAR_SUPPORT_V2);
487
488 if (WARN_ON_ONCE(!iwl_mvm_is_lar_supported(mvm)))
489 return ERR_PTR(-EOPNOTSUPP);
490
491 cmd.len[0] = sizeof(struct iwl_mcc_update_cmd);
492 if (!resp_v2)
493 cmd.len[0] = sizeof(struct iwl_mcc_update_cmd_v1);
494
495 IWL_DEBUG_LAR(mvm, "send MCC update to FW with '%c%c' src = %d\n",
496 alpha2[0], alpha2[1], src_id);
497
498 ret = iwl_mvm_send_cmd(mvm, &cmd);
499 if (ret)
500 return ERR_PTR(ret);
501
502 pkt = cmd.resp_pkt;
503
504
505 if (resp_v2) {
506 struct iwl_mcc_update_resp *mcc_resp = (void *)pkt->data;
507
508 n_channels = __le32_to_cpu(mcc_resp->n_channels);
509 resp_len = sizeof(struct iwl_mcc_update_resp) +
510 n_channels * sizeof(__le32);
511 resp_cp = kmemdup(mcc_resp, resp_len, GFP_KERNEL);
512 if (!resp_cp) {
513 resp_cp = ERR_PTR(-ENOMEM);
514 goto exit;
515 }
516 } else {
517 struct iwl_mcc_update_resp_v1 *mcc_resp_v1 = (void *)pkt->data;
518
519 n_channels = __le32_to_cpu(mcc_resp_v1->n_channels);
520 resp_len = sizeof(struct iwl_mcc_update_resp) +
521 n_channels * sizeof(__le32);
522 resp_cp = kzalloc(resp_len, GFP_KERNEL);
523 if (!resp_cp) {
524 resp_cp = ERR_PTR(-ENOMEM);
525 goto exit;
526 }
527
528 resp_cp->status = mcc_resp_v1->status;
529 resp_cp->mcc = mcc_resp_v1->mcc;
530 resp_cp->cap = mcc_resp_v1->cap;
531 resp_cp->source_id = mcc_resp_v1->source_id;
532 resp_cp->n_channels = mcc_resp_v1->n_channels;
533 memcpy(resp_cp->channels, mcc_resp_v1->channels,
534 n_channels * sizeof(__le32));
535 }
536
537 status = le32_to_cpu(resp_cp->status);
538
539 mcc = le16_to_cpu(resp_cp->mcc);
540
541
542 if (mcc == 0) {
543 mcc = 0x3030;
544 resp_cp->mcc = cpu_to_le16(mcc);
545 }
546
547 IWL_DEBUG_LAR(mvm,
548 "MCC response status: 0x%x. new MCC: 0x%x ('%c%c') change: %d n_chans: %d\n",
549 status, mcc, mcc >> 8, mcc & 0xff,
550 !!(status == MCC_RESP_NEW_CHAN_PROFILE), n_channels);
551
552exit:
553 iwl_free_resp(&cmd);
554 return resp_cp;
555}
556
557int iwl_mvm_init_mcc(struct iwl_mvm *mvm)
558{
559 bool tlv_lar;
560 bool nvm_lar;
561 int retval;
562 struct ieee80211_regdomain *regd;
563 char mcc[3];
564
565 if (mvm->cfg->nvm_type == IWL_NVM_EXT) {
566 tlv_lar = fw_has_capa(&mvm->fw->ucode_capa,
567 IWL_UCODE_TLV_CAPA_LAR_SUPPORT);
568 nvm_lar = mvm->nvm_data->lar_enabled;
569 if (tlv_lar != nvm_lar)
570 IWL_INFO(mvm,
571 "Conflict between TLV & NVM regarding enabling LAR (TLV = %s NVM =%s)\n",
572 tlv_lar ? "enabled" : "disabled",
573 nvm_lar ? "enabled" : "disabled");
574 }
575
576 if (!iwl_mvm_is_lar_supported(mvm))
577 return 0;
578
579
580
581
582
583 retval = iwl_mvm_init_fw_regd(mvm);
584 if (retval != -ENOENT)
585 return retval;
586
587
588
589
590
591
592
593 mvm->lar_regdom_set = false;
594
595 regd = iwl_mvm_get_current_regdomain(mvm, NULL);
596 if (IS_ERR_OR_NULL(regd))
597 return -EIO;
598
599 if (iwl_mvm_is_wifi_mcc_supported(mvm) &&
600 !iwl_acpi_get_mcc(mvm->dev, mcc)) {
601 kfree(regd);
602 regd = iwl_mvm_get_regdomain(mvm->hw->wiphy, mcc,
603 MCC_SOURCE_BIOS, NULL);
604 if (IS_ERR_OR_NULL(regd))
605 return -EIO;
606 }
607
608 retval = regulatory_set_wiphy_regd_sync_rtnl(mvm->hw->wiphy, regd);
609 kfree(regd);
610 return retval;
611}
612
613void iwl_mvm_rx_chub_update_mcc(struct iwl_mvm *mvm,
614 struct iwl_rx_cmd_buffer *rxb)
615{
616 struct iwl_rx_packet *pkt = rxb_addr(rxb);
617 struct iwl_mcc_chub_notif *notif = (void *)pkt->data;
618 enum iwl_mcc_source src;
619 char mcc[3];
620 struct ieee80211_regdomain *regd;
621
622 lockdep_assert_held(&mvm->mutex);
623
624 if (iwl_mvm_is_vif_assoc(mvm) && notif->source_id == MCC_SOURCE_WIFI) {
625 IWL_DEBUG_LAR(mvm, "Ignore mcc update while associated\n");
626 return;
627 }
628
629 if (WARN_ON_ONCE(!iwl_mvm_is_lar_supported(mvm)))
630 return;
631
632 mcc[0] = le16_to_cpu(notif->mcc) >> 8;
633 mcc[1] = le16_to_cpu(notif->mcc) & 0xff;
634 mcc[2] = '\0';
635 src = notif->source_id;
636
637 IWL_DEBUG_LAR(mvm,
638 "RX: received chub update mcc cmd (mcc '%s' src %d)\n",
639 mcc, src);
640 regd = iwl_mvm_get_regdomain(mvm->hw->wiphy, mcc, src, NULL);
641 if (IS_ERR_OR_NULL(regd))
642 return;
643
644 regulatory_set_wiphy_regd(mvm->hw->wiphy, regd);
645 kfree(regd);
646}
647