linux/drivers/rapidio/devices/rio_mport_cdev.c
<<
>>
Prefs
   1// SPDX-License-Identifier: GPL-2.0-or-later
   2/*
   3 * RapidIO mport character device
   4 *
   5 * Copyright 2014-2015 Integrated Device Technology, Inc.
   6 *    Alexandre Bounine <alexandre.bounine@idt.com>
   7 * Copyright 2014-2015 Prodrive Technologies
   8 *    Andre van Herk <andre.van.herk@prodrive-technologies.com>
   9 *    Jerry Jacobs <jerry.jacobs@prodrive-technologies.com>
  10 * Copyright (C) 2014 Texas Instruments Incorporated
  11 *    Aurelien Jacquiot <a-jacquiot@ti.com>
  12 */
  13#include <linux/module.h>
  14#include <linux/kernel.h>
  15#include <linux/cdev.h>
  16#include <linux/ioctl.h>
  17#include <linux/uaccess.h>
  18#include <linux/list.h>
  19#include <linux/fs.h>
  20#include <linux/err.h>
  21#include <linux/net.h>
  22#include <linux/poll.h>
  23#include <linux/spinlock.h>
  24#include <linux/sched.h>
  25#include <linux/kfifo.h>
  26
  27#include <linux/mm.h>
  28#include <linux/slab.h>
  29#include <linux/vmalloc.h>
  30#include <linux/mman.h>
  31
  32#include <linux/dma-mapping.h>
  33#ifdef CONFIG_RAPIDIO_DMA_ENGINE
  34#include <linux/dmaengine.h>
  35#endif
  36
  37#include <linux/rio.h>
  38#include <linux/rio_ids.h>
  39#include <linux/rio_drv.h>
  40#include <linux/rio_mport_cdev.h>
  41
  42#include "../rio.h"
  43
  44#define DRV_NAME        "rio_mport"
  45#define DRV_PREFIX      DRV_NAME ": "
  46#define DEV_NAME        "rio_mport"
  47#define DRV_VERSION     "1.0.0"
  48
  49/* Debug output filtering masks */
  50enum {
  51        DBG_NONE        = 0,
  52        DBG_INIT        = BIT(0), /* driver init */
  53        DBG_EXIT        = BIT(1), /* driver exit */
  54        DBG_MPORT       = BIT(2), /* mport add/remove */
  55        DBG_RDEV        = BIT(3), /* RapidIO device add/remove */
  56        DBG_DMA         = BIT(4), /* DMA transfer messages */
  57        DBG_MMAP        = BIT(5), /* mapping messages */
  58        DBG_IBW         = BIT(6), /* inbound window */
  59        DBG_EVENT       = BIT(7), /* event handling messages */
  60        DBG_OBW         = BIT(8), /* outbound window messages */
  61        DBG_DBELL       = BIT(9), /* doorbell messages */
  62        DBG_ALL         = ~0,
  63};
  64
  65#ifdef DEBUG
  66#define rmcd_debug(level, fmt, arg...)          \
  67        do {                                    \
  68                if (DBG_##level & dbg_level)    \
  69                        pr_debug(DRV_PREFIX "%s: " fmt "\n", __func__, ##arg); \
  70        } while (0)
  71#else
  72#define rmcd_debug(level, fmt, arg...) \
  73                no_printk(KERN_DEBUG pr_fmt(DRV_PREFIX fmt "\n"), ##arg)
  74#endif
  75
  76#define rmcd_warn(fmt, arg...) \
  77        pr_warn(DRV_PREFIX "%s WARNING " fmt "\n", __func__, ##arg)
  78
  79#define rmcd_error(fmt, arg...) \
  80        pr_err(DRV_PREFIX "%s ERROR " fmt "\n", __func__, ##arg)
  81
  82MODULE_AUTHOR("Jerry Jacobs <jerry.jacobs@prodrive-technologies.com>");
  83MODULE_AUTHOR("Aurelien Jacquiot <a-jacquiot@ti.com>");
  84MODULE_AUTHOR("Alexandre Bounine <alexandre.bounine@idt.com>");
  85MODULE_AUTHOR("Andre van Herk <andre.van.herk@prodrive-technologies.com>");
  86MODULE_DESCRIPTION("RapidIO mport character device driver");
  87MODULE_LICENSE("GPL");
  88MODULE_VERSION(DRV_VERSION);
  89
  90static int dma_timeout = 3000; /* DMA transfer timeout in msec */
  91module_param(dma_timeout, int, S_IRUGO);
  92MODULE_PARM_DESC(dma_timeout, "DMA Transfer Timeout in msec (default: 3000)");
  93
  94#ifdef DEBUG
  95static u32 dbg_level = DBG_NONE;
  96module_param(dbg_level, uint, S_IWUSR | S_IWGRP | S_IRUGO);
  97MODULE_PARM_DESC(dbg_level, "Debugging output level (default 0 = none)");
  98#endif
  99
 100/*
 101 * An internal DMA coherent buffer
 102 */
 103struct mport_dma_buf {
 104        void            *ib_base;
 105        dma_addr_t      ib_phys;
 106        u32             ib_size;
 107        u64             ib_rio_base;
 108        bool            ib_map;
 109        struct file     *filp;
 110};
 111
 112/*
 113 * Internal memory mapping structure
 114 */
 115enum rio_mport_map_dir {
 116        MAP_INBOUND,
 117        MAP_OUTBOUND,
 118        MAP_DMA,
 119};
 120
 121struct rio_mport_mapping {
 122        struct list_head node;
 123        struct mport_dev *md;
 124        enum rio_mport_map_dir dir;
 125        u16 rioid;
 126        u64 rio_addr;
 127        dma_addr_t phys_addr; /* for mmap */
 128        void *virt_addr; /* kernel address, for dma_free_coherent */
 129        u64 size;
 130        struct kref ref; /* refcount of vmas sharing the mapping */
 131        struct file *filp;
 132};
 133
 134struct rio_mport_dma_map {
 135        int valid;
 136        u64 length;
 137        void *vaddr;
 138        dma_addr_t paddr;
 139};
 140
 141#define MPORT_MAX_DMA_BUFS      16
 142#define MPORT_EVENT_DEPTH       10
 143
 144/*
 145 * mport_dev  driver-specific structure that represents mport device
 146 * @active    mport device status flag
 147 * @node      list node to maintain list of registered mports
 148 * @cdev      character device
 149 * @dev       associated device object
 150 * @mport     associated subsystem's master port device object
 151 * @buf_mutex lock for buffer handling
 152 * @file_mutex - lock for open files list
 153 * @file_list  - list of open files on given mport
 154 * @properties properties of this mport
 155 * @portwrites queue of inbound portwrites
 156 * @pw_lock    lock for port write queue
 157 * @mappings   queue for memory mappings
 158 * @dma_chan   DMA channels associated with this device
 159 * @dma_ref:
 160 * @comp:
 161 */
 162struct mport_dev {
 163        atomic_t                active;
 164        struct list_head        node;
 165        struct cdev             cdev;
 166        struct device           dev;
 167        struct rio_mport        *mport;
 168        struct mutex            buf_mutex;
 169        struct mutex            file_mutex;
 170        struct list_head        file_list;
 171        struct rio_mport_properties     properties;
 172        struct list_head                doorbells;
 173        spinlock_t                      db_lock;
 174        struct list_head                portwrites;
 175        spinlock_t                      pw_lock;
 176        struct list_head        mappings;
 177#ifdef CONFIG_RAPIDIO_DMA_ENGINE
 178        struct dma_chan *dma_chan;
 179        struct kref     dma_ref;
 180        struct completion comp;
 181#endif
 182};
 183
 184/*
 185 * mport_cdev_priv - data structure specific to individual file object
 186 *                   associated with an open device
 187 * @md    master port character device object
 188 * @async_queue - asynchronous notification queue
 189 * @list - file objects tracking list
 190 * @db_filters    inbound doorbell filters for this descriptor
 191 * @pw_filters    portwrite filters for this descriptor
 192 * @event_fifo    event fifo for this descriptor
 193 * @event_rx_wait wait queue for this descriptor
 194 * @fifo_lock     lock for event_fifo
 195 * @event_mask    event mask for this descriptor
 196 * @dmach DMA engine channel allocated for specific file object
 197 */
 198struct mport_cdev_priv {
 199        struct mport_dev        *md;
 200        struct fasync_struct    *async_queue;
 201        struct list_head        list;
 202        struct list_head        db_filters;
 203        struct list_head        pw_filters;
 204        struct kfifo            event_fifo;
 205        wait_queue_head_t       event_rx_wait;
 206        spinlock_t              fifo_lock;
 207        u32                     event_mask; /* RIO_DOORBELL, RIO_PORTWRITE */
 208#ifdef CONFIG_RAPIDIO_DMA_ENGINE
 209        struct dma_chan         *dmach;
 210        struct list_head        async_list;
 211        spinlock_t              req_lock;
 212        struct mutex            dma_lock;
 213        struct kref             dma_ref;
 214        struct completion       comp;
 215#endif
 216};
 217
 218/*
 219 * rio_mport_pw_filter - structure to describe a portwrite filter
 220 * md_node   node in mport device's list
 221 * priv_node node in private file object's list
 222 * priv      reference to private data
 223 * filter    actual portwrite filter
 224 */
 225struct rio_mport_pw_filter {
 226        struct list_head md_node;
 227        struct list_head priv_node;
 228        struct mport_cdev_priv *priv;
 229        struct rio_pw_filter filter;
 230};
 231
 232/*
 233 * rio_mport_db_filter - structure to describe a doorbell filter
 234 * @data_node reference to device node
 235 * @priv_node node in private data
 236 * @priv      reference to private data
 237 * @filter    actual doorbell filter
 238 */
 239struct rio_mport_db_filter {
 240        struct list_head data_node;
 241        struct list_head priv_node;
 242        struct mport_cdev_priv *priv;
 243        struct rio_doorbell_filter filter;
 244};
 245
 246static LIST_HEAD(mport_devs);
 247static DEFINE_MUTEX(mport_devs_lock);
 248
 249#if (0) /* used by commented out portion of poll function : FIXME */
 250static DECLARE_WAIT_QUEUE_HEAD(mport_cdev_wait);
 251#endif
 252
 253static struct class *dev_class;
 254static dev_t dev_number;
 255
 256static void mport_release_mapping(struct kref *ref);
 257
 258static int rio_mport_maint_rd(struct mport_cdev_priv *priv, void __user *arg,
 259                              int local)
 260{
 261        struct rio_mport *mport = priv->md->mport;
 262        struct rio_mport_maint_io maint_io;
 263        u32 *buffer;
 264        u32 offset;
 265        size_t length;
 266        int ret, i;
 267
 268        if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))
 269                return -EFAULT;
 270
 271        if ((maint_io.offset % 4) ||
 272            (maint_io.length == 0) || (maint_io.length % 4) ||
 273            (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)
 274                return -EINVAL;
 275
 276        buffer = vmalloc(maint_io.length);
 277        if (buffer == NULL)
 278                return -ENOMEM;
 279        length = maint_io.length/sizeof(u32);
 280        offset = maint_io.offset;
 281
 282        for (i = 0; i < length; i++) {
 283                if (local)
 284                        ret = __rio_local_read_config_32(mport,
 285                                offset, &buffer[i]);
 286                else
 287                        ret = rio_mport_read_config_32(mport, maint_io.rioid,
 288                                maint_io.hopcount, offset, &buffer[i]);
 289                if (ret)
 290                        goto out;
 291
 292                offset += 4;
 293        }
 294
 295        if (unlikely(copy_to_user((void __user *)(uintptr_t)maint_io.buffer,
 296                                   buffer, maint_io.length)))
 297                ret = -EFAULT;
 298out:
 299        vfree(buffer);
 300        return ret;
 301}
 302
 303static int rio_mport_maint_wr(struct mport_cdev_priv *priv, void __user *arg,
 304                              int local)
 305{
 306        struct rio_mport *mport = priv->md->mport;
 307        struct rio_mport_maint_io maint_io;
 308        u32 *buffer;
 309        u32 offset;
 310        size_t length;
 311        int ret = -EINVAL, i;
 312
 313        if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))
 314                return -EFAULT;
 315
 316        if ((maint_io.offset % 4) ||
 317            (maint_io.length == 0) || (maint_io.length % 4) ||
 318            (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)
 319                return -EINVAL;
 320
 321        buffer = vmalloc(maint_io.length);
 322        if (buffer == NULL)
 323                return -ENOMEM;
 324        length = maint_io.length;
 325
 326        if (unlikely(copy_from_user(buffer,
 327                        (void __user *)(uintptr_t)maint_io.buffer, length))) {
 328                ret = -EFAULT;
 329                goto out;
 330        }
 331
 332        offset = maint_io.offset;
 333        length /= sizeof(u32);
 334
 335        for (i = 0; i < length; i++) {
 336                if (local)
 337                        ret = __rio_local_write_config_32(mport,
 338                                                          offset, buffer[i]);
 339                else
 340                        ret = rio_mport_write_config_32(mport, maint_io.rioid,
 341                                                        maint_io.hopcount,
 342                                                        offset, buffer[i]);
 343                if (ret)
 344                        goto out;
 345
 346                offset += 4;
 347        }
 348
 349out:
 350        vfree(buffer);
 351        return ret;
 352}
 353
 354
 355/*
 356 * Inbound/outbound memory mapping functions
 357 */
 358static int
 359rio_mport_create_outbound_mapping(struct mport_dev *md, struct file *filp,
 360                                  u16 rioid, u64 raddr, u32 size,
 361                                  dma_addr_t *paddr)
 362{
 363        struct rio_mport *mport = md->mport;
 364        struct rio_mport_mapping *map;
 365        int ret;
 366
 367        rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%x", rioid, raddr, size);
 368
 369        map = kzalloc(sizeof(*map), GFP_KERNEL);
 370        if (map == NULL)
 371                return -ENOMEM;
 372
 373        ret = rio_map_outb_region(mport, rioid, raddr, size, 0, paddr);
 374        if (ret < 0)
 375                goto err_map_outb;
 376
 377        map->dir = MAP_OUTBOUND;
 378        map->rioid = rioid;
 379        map->rio_addr = raddr;
 380        map->size = size;
 381        map->phys_addr = *paddr;
 382        map->filp = filp;
 383        map->md = md;
 384        kref_init(&map->ref);
 385        list_add_tail(&map->node, &md->mappings);
 386        return 0;
 387err_map_outb:
 388        kfree(map);
 389        return ret;
 390}
 391
 392static int
 393rio_mport_get_outbound_mapping(struct mport_dev *md, struct file *filp,
 394                               u16 rioid, u64 raddr, u32 size,
 395                               dma_addr_t *paddr)
 396{
 397        struct rio_mport_mapping *map;
 398        int err = -ENOMEM;
 399
 400        mutex_lock(&md->buf_mutex);
 401        list_for_each_entry(map, &md->mappings, node) {
 402                if (map->dir != MAP_OUTBOUND)
 403                        continue;
 404                if (rioid == map->rioid &&
 405                    raddr == map->rio_addr && size == map->size) {
 406                        *paddr = map->phys_addr;
 407                        err = 0;
 408                        break;
 409                } else if (rioid == map->rioid &&
 410                           raddr < (map->rio_addr + map->size - 1) &&
 411                           (raddr + size) > map->rio_addr) {
 412                        err = -EBUSY;
 413                        break;
 414                }
 415        }
 416
 417        /* If not found, create new */
 418        if (err == -ENOMEM)
 419                err = rio_mport_create_outbound_mapping(md, filp, rioid, raddr,
 420                                                size, paddr);
 421        mutex_unlock(&md->buf_mutex);
 422        return err;
 423}
 424
 425static int rio_mport_obw_map(struct file *filp, void __user *arg)
 426{
 427        struct mport_cdev_priv *priv = filp->private_data;
 428        struct mport_dev *data = priv->md;
 429        struct rio_mmap map;
 430        dma_addr_t paddr;
 431        int ret;
 432
 433        if (unlikely(copy_from_user(&map, arg, sizeof(map))))
 434                return -EFAULT;
 435
 436        rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%llx",
 437                   map.rioid, map.rio_addr, map.length);
 438
 439        ret = rio_mport_get_outbound_mapping(data, filp, map.rioid,
 440                                             map.rio_addr, map.length, &paddr);
 441        if (ret < 0) {
 442                rmcd_error("Failed to set OBW err= %d", ret);
 443                return ret;
 444        }
 445
 446        map.handle = paddr;
 447
 448        if (unlikely(copy_to_user(arg, &map, sizeof(map))))
 449                return -EFAULT;
 450        return 0;
 451}
 452
 453/*
 454 * rio_mport_obw_free() - unmap an OutBound Window from RapidIO address space
 455 *
 456 * @priv: driver private data
 457 * @arg:  buffer handle returned by allocation routine
 458 */
 459static int rio_mport_obw_free(struct file *filp, void __user *arg)
 460{
 461        struct mport_cdev_priv *priv = filp->private_data;
 462        struct mport_dev *md = priv->md;
 463        u64 handle;
 464        struct rio_mport_mapping *map, *_map;
 465
 466        if (!md->mport->ops->unmap_outb)
 467                return -EPROTONOSUPPORT;
 468
 469        if (copy_from_user(&handle, arg, sizeof(handle)))
 470                return -EFAULT;
 471
 472        rmcd_debug(OBW, "h=0x%llx", handle);
 473
 474        mutex_lock(&md->buf_mutex);
 475        list_for_each_entry_safe(map, _map, &md->mappings, node) {
 476                if (map->dir == MAP_OUTBOUND && map->phys_addr == handle) {
 477                        if (map->filp == filp) {
 478                                rmcd_debug(OBW, "kref_put h=0x%llx", handle);
 479                                map->filp = NULL;
 480                                kref_put(&map->ref, mport_release_mapping);
 481                        }
 482                        break;
 483                }
 484        }
 485        mutex_unlock(&md->buf_mutex);
 486
 487        return 0;
 488}
 489
 490/*
 491 * maint_hdid_set() - Set the host Device ID
 492 * @priv: driver private data
 493 * @arg:        Device Id
 494 */
 495static int maint_hdid_set(struct mport_cdev_priv *priv, void __user *arg)
 496{
 497        struct mport_dev *md = priv->md;
 498        u16 hdid;
 499
 500        if (copy_from_user(&hdid, arg, sizeof(hdid)))
 501                return -EFAULT;
 502
 503        md->mport->host_deviceid = hdid;
 504        md->properties.hdid = hdid;
 505        rio_local_set_device_id(md->mport, hdid);
 506
 507        rmcd_debug(MPORT, "Set host device Id to %d", hdid);
 508
 509        return 0;
 510}
 511
 512/*
 513 * maint_comptag_set() - Set the host Component Tag
 514 * @priv: driver private data
 515 * @arg:        Component Tag
 516 */
 517static int maint_comptag_set(struct mport_cdev_priv *priv, void __user *arg)
 518{
 519        struct mport_dev *md = priv->md;
 520        u32 comptag;
 521
 522        if (copy_from_user(&comptag, arg, sizeof(comptag)))
 523                return -EFAULT;
 524
 525        rio_local_write_config_32(md->mport, RIO_COMPONENT_TAG_CSR, comptag);
 526
 527        rmcd_debug(MPORT, "Set host Component Tag to %d", comptag);
 528
 529        return 0;
 530}
 531
 532#ifdef CONFIG_RAPIDIO_DMA_ENGINE
 533
 534struct mport_dma_req {
 535        struct kref refcount;
 536        struct list_head node;
 537        struct file *filp;
 538        struct mport_cdev_priv *priv;
 539        enum rio_transfer_sync sync;
 540        struct sg_table sgt;
 541        struct page **page_list;
 542        unsigned int nr_pages;
 543        struct rio_mport_mapping *map;
 544        struct dma_chan *dmach;
 545        enum dma_data_direction dir;
 546        dma_cookie_t cookie;
 547        enum dma_status status;
 548        struct completion req_comp;
 549};
 550
 551static void mport_release_def_dma(struct kref *dma_ref)
 552{
 553        struct mport_dev *md =
 554                        container_of(dma_ref, struct mport_dev, dma_ref);
 555
 556        rmcd_debug(EXIT, "DMA_%d", md->dma_chan->chan_id);
 557        rio_release_dma(md->dma_chan);
 558        md->dma_chan = NULL;
 559}
 560
 561static void mport_release_dma(struct kref *dma_ref)
 562{
 563        struct mport_cdev_priv *priv =
 564                        container_of(dma_ref, struct mport_cdev_priv, dma_ref);
 565
 566        rmcd_debug(EXIT, "DMA_%d", priv->dmach->chan_id);
 567        complete(&priv->comp);
 568}
 569
 570static void dma_req_free(struct kref *ref)
 571{
 572        struct mport_dma_req *req = container_of(ref, struct mport_dma_req,
 573                        refcount);
 574        struct mport_cdev_priv *priv = req->priv;
 575        unsigned int i;
 576
 577        dma_unmap_sg(req->dmach->device->dev,
 578                     req->sgt.sgl, req->sgt.nents, req->dir);
 579        sg_free_table(&req->sgt);
 580        if (req->page_list) {
 581                for (i = 0; i < req->nr_pages; i++)
 582                        put_page(req->page_list[i]);
 583                kfree(req->page_list);
 584        }
 585
 586        if (req->map) {
 587                mutex_lock(&req->map->md->buf_mutex);
 588                kref_put(&req->map->ref, mport_release_mapping);
 589                mutex_unlock(&req->map->md->buf_mutex);
 590        }
 591
 592        kref_put(&priv->dma_ref, mport_release_dma);
 593
 594        kfree(req);
 595}
 596
 597static void dma_xfer_callback(void *param)
 598{
 599        struct mport_dma_req *req = (struct mport_dma_req *)param;
 600        struct mport_cdev_priv *priv = req->priv;
 601
 602        req->status = dma_async_is_tx_complete(priv->dmach, req->cookie,
 603                                               NULL, NULL);
 604        complete(&req->req_comp);
 605        kref_put(&req->refcount, dma_req_free);
 606}
 607
 608/*
 609 * prep_dma_xfer() - Configure and send request to DMAengine to prepare DMA
 610 *                   transfer object.
 611 * Returns pointer to DMA transaction descriptor allocated by DMA driver on
 612 * success or ERR_PTR (and/or NULL) if failed. Caller must check returned
 613 * non-NULL pointer using IS_ERR macro.
 614 */
 615static struct dma_async_tx_descriptor
 616*prep_dma_xfer(struct dma_chan *chan, struct rio_transfer_io *transfer,
 617        struct sg_table *sgt, int nents, enum dma_transfer_direction dir,
 618        enum dma_ctrl_flags flags)
 619{
 620        struct rio_dma_data tx_data;
 621
 622        tx_data.sg = sgt->sgl;
 623        tx_data.sg_len = nents;
 624        tx_data.rio_addr_u = 0;
 625        tx_data.rio_addr = transfer->rio_addr;
 626        if (dir == DMA_MEM_TO_DEV) {
 627                switch (transfer->method) {
 628                case RIO_EXCHANGE_NWRITE:
 629                        tx_data.wr_type = RDW_ALL_NWRITE;
 630                        break;
 631                case RIO_EXCHANGE_NWRITE_R_ALL:
 632                        tx_data.wr_type = RDW_ALL_NWRITE_R;
 633                        break;
 634                case RIO_EXCHANGE_NWRITE_R:
 635                        tx_data.wr_type = RDW_LAST_NWRITE_R;
 636                        break;
 637                case RIO_EXCHANGE_DEFAULT:
 638                        tx_data.wr_type = RDW_DEFAULT;
 639                        break;
 640                default:
 641                        return ERR_PTR(-EINVAL);
 642                }
 643        }
 644
 645        return rio_dma_prep_xfer(chan, transfer->rioid, &tx_data, dir, flags);
 646}
 647
 648/* Request DMA channel associated with this mport device.
 649 * Try to request DMA channel for every new process that opened given
 650 * mport. If a new DMA channel is not available use default channel
 651 * which is the first DMA channel opened on mport device.
 652 */
 653static int get_dma_channel(struct mport_cdev_priv *priv)
 654{
 655        mutex_lock(&priv->dma_lock);
 656        if (!priv->dmach) {
 657                priv->dmach = rio_request_mport_dma(priv->md->mport);
 658                if (!priv->dmach) {
 659                        /* Use default DMA channel if available */
 660                        if (priv->md->dma_chan) {
 661                                priv->dmach = priv->md->dma_chan;
 662                                kref_get(&priv->md->dma_ref);
 663                        } else {
 664                                rmcd_error("Failed to get DMA channel");
 665                                mutex_unlock(&priv->dma_lock);
 666                                return -ENODEV;
 667                        }
 668                } else if (!priv->md->dma_chan) {
 669                        /* Register default DMA channel if we do not have one */
 670                        priv->md->dma_chan = priv->dmach;
 671                        kref_init(&priv->md->dma_ref);
 672                        rmcd_debug(DMA, "Register DMA_chan %d as default",
 673                                   priv->dmach->chan_id);
 674                }
 675
 676                kref_init(&priv->dma_ref);
 677                init_completion(&priv->comp);
 678        }
 679
 680        kref_get(&priv->dma_ref);
 681        mutex_unlock(&priv->dma_lock);
 682        return 0;
 683}
 684
 685static void put_dma_channel(struct mport_cdev_priv *priv)
 686{
 687        kref_put(&priv->dma_ref, mport_release_dma);
 688}
 689
 690/*
 691 * DMA transfer functions
 692 */
 693static int do_dma_request(struct mport_dma_req *req,
 694                          struct rio_transfer_io *xfer,
 695                          enum rio_transfer_sync sync, int nents)
 696{
 697        struct mport_cdev_priv *priv;
 698        struct sg_table *sgt;
 699        struct dma_chan *chan;
 700        struct dma_async_tx_descriptor *tx;
 701        dma_cookie_t cookie;
 702        unsigned long tmo = msecs_to_jiffies(dma_timeout);
 703        enum dma_transfer_direction dir;
 704        long wret;
 705        int ret = 0;
 706
 707        priv = req->priv;
 708        sgt = &req->sgt;
 709
 710        chan = priv->dmach;
 711        dir = (req->dir == DMA_FROM_DEVICE) ? DMA_DEV_TO_MEM : DMA_MEM_TO_DEV;
 712
 713        rmcd_debug(DMA, "%s(%d) uses %s for DMA_%s",
 714                   current->comm, task_pid_nr(current),
 715                   dev_name(&chan->dev->device),
 716                   (dir == DMA_DEV_TO_MEM)?"READ":"WRITE");
 717
 718        /* Initialize DMA transaction request */
 719        tx = prep_dma_xfer(chan, xfer, sgt, nents, dir,
 720                           DMA_CTRL_ACK | DMA_PREP_INTERRUPT);
 721
 722        if (!tx) {
 723                rmcd_debug(DMA, "prep error for %s A:0x%llx L:0x%llx",
 724                        (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
 725                        xfer->rio_addr, xfer->length);
 726                ret = -EIO;
 727                goto err_out;
 728        } else if (IS_ERR(tx)) {
 729                ret = PTR_ERR(tx);
 730                rmcd_debug(DMA, "prep error %d for %s A:0x%llx L:0x%llx", ret,
 731                        (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
 732                        xfer->rio_addr, xfer->length);
 733                goto err_out;
 734        }
 735
 736        tx->callback = dma_xfer_callback;
 737        tx->callback_param = req;
 738
 739        req->status = DMA_IN_PROGRESS;
 740        kref_get(&req->refcount);
 741
 742        cookie = dmaengine_submit(tx);
 743        req->cookie = cookie;
 744
 745        rmcd_debug(DMA, "pid=%d DMA_%s tx_cookie = %d", task_pid_nr(current),
 746                   (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
 747
 748        if (dma_submit_error(cookie)) {
 749                rmcd_error("submit err=%d (addr:0x%llx len:0x%llx)",
 750                           cookie, xfer->rio_addr, xfer->length);
 751                kref_put(&req->refcount, dma_req_free);
 752                ret = -EIO;
 753                goto err_out;
 754        }
 755
 756        dma_async_issue_pending(chan);
 757
 758        if (sync == RIO_TRANSFER_ASYNC) {
 759                spin_lock(&priv->req_lock);
 760                list_add_tail(&req->node, &priv->async_list);
 761                spin_unlock(&priv->req_lock);
 762                return cookie;
 763        } else if (sync == RIO_TRANSFER_FAF)
 764                return 0;
 765
 766        wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo);
 767
 768        if (wret == 0) {
 769                /* Timeout on wait occurred */
 770                rmcd_error("%s(%d) timed out waiting for DMA_%s %d",
 771                       current->comm, task_pid_nr(current),
 772                       (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
 773                return -ETIMEDOUT;
 774        } else if (wret == -ERESTARTSYS) {
 775                /* Wait_for_completion was interrupted by a signal but DMA may
 776                 * be in progress
 777                 */
 778                rmcd_error("%s(%d) wait for DMA_%s %d was interrupted",
 779                        current->comm, task_pid_nr(current),
 780                        (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
 781                return -EINTR;
 782        }
 783
 784        if (req->status != DMA_COMPLETE) {
 785                /* DMA transaction completion was signaled with error */
 786                rmcd_error("%s(%d) DMA_%s %d completed with status %d (ret=%d)",
 787                        current->comm, task_pid_nr(current),
 788                        (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
 789                        cookie, req->status, ret);
 790                ret = -EIO;
 791        }
 792
 793err_out:
 794        return ret;
 795}
 796
 797/*
 798 * rio_dma_transfer() - Perform RapidIO DMA data transfer to/from
 799 *                      the remote RapidIO device
 800 * @filp: file pointer associated with the call
 801 * @transfer_mode: DMA transfer mode
 802 * @sync: synchronization mode
 803 * @dir: DMA transfer direction (DMA_MEM_TO_DEV = write OR
 804 *                               DMA_DEV_TO_MEM = read)
 805 * @xfer: data transfer descriptor structure
 806 */
 807static int
 808rio_dma_transfer(struct file *filp, u32 transfer_mode,
 809                 enum rio_transfer_sync sync, enum dma_data_direction dir,
 810                 struct rio_transfer_io *xfer)
 811{
 812        struct mport_cdev_priv *priv = filp->private_data;
 813        unsigned long nr_pages = 0;
 814        struct page **page_list = NULL;
 815        struct mport_dma_req *req;
 816        struct mport_dev *md = priv->md;
 817        struct dma_chan *chan;
 818        int i, ret;
 819        int nents;
 820
 821        if (xfer->length == 0)
 822                return -EINVAL;
 823        req = kzalloc(sizeof(*req), GFP_KERNEL);
 824        if (!req)
 825                return -ENOMEM;
 826
 827        ret = get_dma_channel(priv);
 828        if (ret) {
 829                kfree(req);
 830                return ret;
 831        }
 832        chan = priv->dmach;
 833
 834        kref_init(&req->refcount);
 835        init_completion(&req->req_comp);
 836        req->dir = dir;
 837        req->filp = filp;
 838        req->priv = priv;
 839        req->dmach = chan;
 840        req->sync = sync;
 841
 842        /*
 843         * If parameter loc_addr != NULL, we are transferring data from/to
 844         * data buffer allocated in user-space: lock in memory user-space
 845         * buffer pages and build an SG table for DMA transfer request
 846         *
 847         * Otherwise (loc_addr == NULL) contiguous kernel-space buffer is
 848         * used for DMA data transfers: build single entry SG table using
 849         * offset within the internal buffer specified by handle parameter.
 850         */
 851        if (xfer->loc_addr) {
 852                unsigned int offset;
 853                long pinned;
 854
 855                offset = lower_32_bits(offset_in_page(xfer->loc_addr));
 856                nr_pages = PAGE_ALIGN(xfer->length + offset) >> PAGE_SHIFT;
 857
 858                page_list = kmalloc_array(nr_pages,
 859                                          sizeof(*page_list), GFP_KERNEL);
 860                if (page_list == NULL) {
 861                        ret = -ENOMEM;
 862                        goto err_req;
 863                }
 864
 865                pinned = get_user_pages_fast(
 866                                (unsigned long)xfer->loc_addr & PAGE_MASK,
 867                                nr_pages,
 868                                dir == DMA_FROM_DEVICE ? FOLL_WRITE : 0,
 869                                page_list);
 870
 871                if (pinned != nr_pages) {
 872                        if (pinned < 0) {
 873                                rmcd_error("get_user_pages_unlocked err=%ld",
 874                                           pinned);
 875                                nr_pages = 0;
 876                        } else
 877                                rmcd_error("pinned %ld out of %ld pages",
 878                                           pinned, nr_pages);
 879                        ret = -EFAULT;
 880                        goto err_pg;
 881                }
 882
 883                ret = sg_alloc_table_from_pages(&req->sgt, page_list, nr_pages,
 884                                        offset, xfer->length, GFP_KERNEL);
 885                if (ret) {
 886                        rmcd_error("sg_alloc_table failed with err=%d", ret);
 887                        goto err_pg;
 888                }
 889
 890                req->page_list = page_list;
 891                req->nr_pages = nr_pages;
 892        } else {
 893                dma_addr_t baddr;
 894                struct rio_mport_mapping *map;
 895
 896                baddr = (dma_addr_t)xfer->handle;
 897
 898                mutex_lock(&md->buf_mutex);
 899                list_for_each_entry(map, &md->mappings, node) {
 900                        if (baddr >= map->phys_addr &&
 901                            baddr < (map->phys_addr + map->size)) {
 902                                kref_get(&map->ref);
 903                                req->map = map;
 904                                break;
 905                        }
 906                }
 907                mutex_unlock(&md->buf_mutex);
 908
 909                if (req->map == NULL) {
 910                        ret = -ENOMEM;
 911                        goto err_req;
 912                }
 913
 914                if (xfer->length + xfer->offset > map->size) {
 915                        ret = -EINVAL;
 916                        goto err_req;
 917                }
 918
 919                ret = sg_alloc_table(&req->sgt, 1, GFP_KERNEL);
 920                if (unlikely(ret)) {
 921                        rmcd_error("sg_alloc_table failed for internal buf");
 922                        goto err_req;
 923                }
 924
 925                sg_set_buf(req->sgt.sgl,
 926                           map->virt_addr + (baddr - map->phys_addr) +
 927                                xfer->offset, xfer->length);
 928        }
 929
 930        nents = dma_map_sg(chan->device->dev,
 931                           req->sgt.sgl, req->sgt.nents, dir);
 932        if (nents == 0) {
 933                rmcd_error("Failed to map SG list");
 934                ret = -EFAULT;
 935                goto err_pg;
 936        }
 937
 938        ret = do_dma_request(req, xfer, sync, nents);
 939
 940        if (ret >= 0) {
 941                if (sync == RIO_TRANSFER_ASYNC)
 942                        return ret; /* return ASYNC cookie */
 943        } else {
 944                rmcd_debug(DMA, "do_dma_request failed with err=%d", ret);
 945        }
 946
 947err_pg:
 948        if (!req->page_list) {
 949                for (i = 0; i < nr_pages; i++)
 950                        put_page(page_list[i]);
 951                kfree(page_list);
 952        }
 953err_req:
 954        kref_put(&req->refcount, dma_req_free);
 955        return ret;
 956}
 957
 958static int rio_mport_transfer_ioctl(struct file *filp, void __user *arg)
 959{
 960        struct mport_cdev_priv *priv = filp->private_data;
 961        struct rio_transaction transaction;
 962        struct rio_transfer_io *transfer;
 963        enum dma_data_direction dir;
 964        int i, ret = 0;
 965
 966        if (unlikely(copy_from_user(&transaction, arg, sizeof(transaction))))
 967                return -EFAULT;
 968
 969        if (transaction.count != 1) /* only single transfer for now */
 970                return -EINVAL;
 971
 972        if ((transaction.transfer_mode &
 973             priv->md->properties.transfer_mode) == 0)
 974                return -ENODEV;
 975
 976        transfer = vmalloc(array_size(sizeof(*transfer), transaction.count));
 977        if (!transfer)
 978                return -ENOMEM;
 979
 980        if (unlikely(copy_from_user(transfer,
 981                                    (void __user *)(uintptr_t)transaction.block,
 982                                    transaction.count * sizeof(*transfer)))) {
 983                ret = -EFAULT;
 984                goto out_free;
 985        }
 986
 987        dir = (transaction.dir == RIO_TRANSFER_DIR_READ) ?
 988                                        DMA_FROM_DEVICE : DMA_TO_DEVICE;
 989        for (i = 0; i < transaction.count && ret == 0; i++)
 990                ret = rio_dma_transfer(filp, transaction.transfer_mode,
 991                        transaction.sync, dir, &transfer[i]);
 992
 993        if (unlikely(copy_to_user((void __user *)(uintptr_t)transaction.block,
 994                                  transfer,
 995                                  transaction.count * sizeof(*transfer))))
 996                ret = -EFAULT;
 997
 998out_free:
 999        vfree(transfer);
1000
1001        return ret;
1002}
1003
1004static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)
1005{
1006        struct mport_cdev_priv *priv;
1007        struct rio_async_tx_wait w_param;
1008        struct mport_dma_req *req;
1009        dma_cookie_t cookie;
1010        unsigned long tmo;
1011        long wret;
1012        int found = 0;
1013        int ret;
1014
1015        priv = (struct mport_cdev_priv *)filp->private_data;
1016
1017        if (unlikely(copy_from_user(&w_param, arg, sizeof(w_param))))
1018                return -EFAULT;
1019
1020        cookie = w_param.token;
1021        if (w_param.timeout)
1022                tmo = msecs_to_jiffies(w_param.timeout);
1023        else /* Use default DMA timeout */
1024                tmo = msecs_to_jiffies(dma_timeout);
1025
1026        spin_lock(&priv->req_lock);
1027        list_for_each_entry(req, &priv->async_list, node) {
1028                if (req->cookie == cookie) {
1029                        list_del(&req->node);
1030                        found = 1;
1031                        break;
1032                }
1033        }
1034        spin_unlock(&priv->req_lock);
1035
1036        if (!found)
1037                return -EAGAIN;
1038
1039        wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo);
1040
1041        if (wret == 0) {
1042                /* Timeout on wait occurred */
1043                rmcd_error("%s(%d) timed out waiting for ASYNC DMA_%s",
1044                       current->comm, task_pid_nr(current),
1045                       (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE");
1046                ret = -ETIMEDOUT;
1047                goto err_tmo;
1048        } else if (wret == -ERESTARTSYS) {
1049                /* Wait_for_completion was interrupted by a signal but DMA may
1050                 * be still in progress
1051                 */
1052                rmcd_error("%s(%d) wait for ASYNC DMA_%s was interrupted",
1053                        current->comm, task_pid_nr(current),
1054                        (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE");
1055                ret = -EINTR;
1056                goto err_tmo;
1057        }
1058
1059        if (req->status != DMA_COMPLETE) {
1060                /* DMA transaction completion signaled with transfer error */
1061                rmcd_error("%s(%d) ASYNC DMA_%s completion with status %d",
1062                        current->comm, task_pid_nr(current),
1063                        (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE",
1064                        req->status);
1065                ret = -EIO;
1066        } else
1067                ret = 0;
1068
1069        if (req->status != DMA_IN_PROGRESS && req->status != DMA_PAUSED)
1070                kref_put(&req->refcount, dma_req_free);
1071
1072        return ret;
1073
1074err_tmo:
1075        /* Return request back into async queue */
1076        spin_lock(&priv->req_lock);
1077        list_add_tail(&req->node, &priv->async_list);
1078        spin_unlock(&priv->req_lock);
1079        return ret;
1080}
1081
1082static int rio_mport_create_dma_mapping(struct mport_dev *md, struct file *filp,
1083                        u64 size, struct rio_mport_mapping **mapping)
1084{
1085        struct rio_mport_mapping *map;
1086
1087        map = kzalloc(sizeof(*map), GFP_KERNEL);
1088        if (map == NULL)
1089                return -ENOMEM;
1090
1091        map->virt_addr = dma_alloc_coherent(md->mport->dev.parent, size,
1092                                            &map->phys_addr, GFP_KERNEL);
1093        if (map->virt_addr == NULL) {
1094                kfree(map);
1095                return -ENOMEM;
1096        }
1097
1098        map->dir = MAP_DMA;
1099        map->size = size;
1100        map->filp = filp;
1101        map->md = md;
1102        kref_init(&map->ref);
1103        mutex_lock(&md->buf_mutex);
1104        list_add_tail(&map->node, &md->mappings);
1105        mutex_unlock(&md->buf_mutex);
1106        *mapping = map;
1107
1108        return 0;
1109}
1110
1111static int rio_mport_alloc_dma(struct file *filp, void __user *arg)
1112{
1113        struct mport_cdev_priv *priv = filp->private_data;
1114        struct mport_dev *md = priv->md;
1115        struct rio_dma_mem map;
1116        struct rio_mport_mapping *mapping = NULL;
1117        int ret;
1118
1119        if (unlikely(copy_from_user(&map, arg, sizeof(map))))
1120                return -EFAULT;
1121
1122        ret = rio_mport_create_dma_mapping(md, filp, map.length, &mapping);
1123        if (ret)
1124                return ret;
1125
1126        map.dma_handle = mapping->phys_addr;
1127
1128        if (unlikely(copy_to_user(arg, &map, sizeof(map)))) {
1129                mutex_lock(&md->buf_mutex);
1130                kref_put(&mapping->ref, mport_release_mapping);
1131                mutex_unlock(&md->buf_mutex);
1132                return -EFAULT;
1133        }
1134
1135        return 0;
1136}
1137
1138static int rio_mport_free_dma(struct file *filp, void __user *arg)
1139{
1140        struct mport_cdev_priv *priv = filp->private_data;
1141        struct mport_dev *md = priv->md;
1142        u64 handle;
1143        int ret = -EFAULT;
1144        struct rio_mport_mapping *map, *_map;
1145
1146        if (copy_from_user(&handle, arg, sizeof(handle)))
1147                return -EFAULT;
1148        rmcd_debug(EXIT, "filp=%p", filp);
1149
1150        mutex_lock(&md->buf_mutex);
1151        list_for_each_entry_safe(map, _map, &md->mappings, node) {
1152                if (map->dir == MAP_DMA && map->phys_addr == handle &&
1153                    map->filp == filp) {
1154                        kref_put(&map->ref, mport_release_mapping);
1155                        ret = 0;
1156                        break;
1157                }
1158        }
1159        mutex_unlock(&md->buf_mutex);
1160
1161        if (ret == -EFAULT) {
1162                rmcd_debug(DMA, "ERR no matching mapping");
1163                return ret;
1164        }
1165
1166        return 0;
1167}
1168#else
1169static int rio_mport_transfer_ioctl(struct file *filp, void *arg)
1170{
1171        return -ENODEV;
1172}
1173
1174static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)
1175{
1176        return -ENODEV;
1177}
1178
1179static int rio_mport_alloc_dma(struct file *filp, void __user *arg)
1180{
1181        return -ENODEV;
1182}
1183
1184static int rio_mport_free_dma(struct file *filp, void __user *arg)
1185{
1186        return -ENODEV;
1187}
1188#endif /* CONFIG_RAPIDIO_DMA_ENGINE */
1189
1190/*
1191 * Inbound/outbound memory mapping functions
1192 */
1193
1194static int
1195rio_mport_create_inbound_mapping(struct mport_dev *md, struct file *filp,
1196                                u64 raddr, u64 size,
1197                                struct rio_mport_mapping **mapping)
1198{
1199        struct rio_mport *mport = md->mport;
1200        struct rio_mport_mapping *map;
1201        int ret;
1202
1203        /* rio_map_inb_region() accepts u32 size */
1204        if (size > 0xffffffff)
1205                return -EINVAL;
1206
1207        map = kzalloc(sizeof(*map), GFP_KERNEL);
1208        if (map == NULL)
1209                return -ENOMEM;
1210
1211        map->virt_addr = dma_alloc_coherent(mport->dev.parent, size,
1212                                            &map->phys_addr, GFP_KERNEL);
1213        if (map->virt_addr == NULL) {
1214                ret = -ENOMEM;
1215                goto err_dma_alloc;
1216        }
1217
1218        if (raddr == RIO_MAP_ANY_ADDR)
1219                raddr = map->phys_addr;
1220        ret = rio_map_inb_region(mport, map->phys_addr, raddr, (u32)size, 0);
1221        if (ret < 0)
1222                goto err_map_inb;
1223
1224        map->dir = MAP_INBOUND;
1225        map->rio_addr = raddr;
1226        map->size = size;
1227        map->filp = filp;
1228        map->md = md;
1229        kref_init(&map->ref);
1230        mutex_lock(&md->buf_mutex);
1231        list_add_tail(&map->node, &md->mappings);
1232        mutex_unlock(&md->buf_mutex);
1233        *mapping = map;
1234        return 0;
1235
1236err_map_inb:
1237        dma_free_coherent(mport->dev.parent, size,
1238                          map->virt_addr, map->phys_addr);
1239err_dma_alloc:
1240        kfree(map);
1241        return ret;
1242}
1243
1244static int
1245rio_mport_get_inbound_mapping(struct mport_dev *md, struct file *filp,
1246                              u64 raddr, u64 size,
1247                              struct rio_mport_mapping **mapping)
1248{
1249        struct rio_mport_mapping *map;
1250        int err = -ENOMEM;
1251
1252        if (raddr == RIO_MAP_ANY_ADDR)
1253                goto get_new;
1254
1255        mutex_lock(&md->buf_mutex);
1256        list_for_each_entry(map, &md->mappings, node) {
1257                if (map->dir != MAP_INBOUND)
1258                        continue;
1259                if (raddr == map->rio_addr && size == map->size) {
1260                        /* allow exact match only */
1261                        *mapping = map;
1262                        err = 0;
1263                        break;
1264                } else if (raddr < (map->rio_addr + map->size - 1) &&
1265                           (raddr + size) > map->rio_addr) {
1266                        err = -EBUSY;
1267                        break;
1268                }
1269        }
1270        mutex_unlock(&md->buf_mutex);
1271
1272        if (err != -ENOMEM)
1273                return err;
1274get_new:
1275        /* not found, create new */
1276        return rio_mport_create_inbound_mapping(md, filp, raddr, size, mapping);
1277}
1278
1279static int rio_mport_map_inbound(struct file *filp, void __user *arg)
1280{
1281        struct mport_cdev_priv *priv = filp->private_data;
1282        struct mport_dev *md = priv->md;
1283        struct rio_mmap map;
1284        struct rio_mport_mapping *mapping = NULL;
1285        int ret;
1286
1287        if (!md->mport->ops->map_inb)
1288                return -EPROTONOSUPPORT;
1289        if (unlikely(copy_from_user(&map, arg, sizeof(map))))
1290                return -EFAULT;
1291
1292        rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp);
1293
1294        ret = rio_mport_get_inbound_mapping(md, filp, map.rio_addr,
1295                                            map.length, &mapping);
1296        if (ret)
1297                return ret;
1298
1299        map.handle = mapping->phys_addr;
1300        map.rio_addr = mapping->rio_addr;
1301
1302        if (unlikely(copy_to_user(arg, &map, sizeof(map)))) {
1303                /* Delete mapping if it was created by this request */
1304                if (ret == 0 && mapping->filp == filp) {
1305                        mutex_lock(&md->buf_mutex);
1306                        kref_put(&mapping->ref, mport_release_mapping);
1307                        mutex_unlock(&md->buf_mutex);
1308                }
1309                return -EFAULT;
1310        }
1311
1312        return 0;
1313}
1314
1315/*
1316 * rio_mport_inbound_free() - unmap from RapidIO address space and free
1317 *                    previously allocated inbound DMA coherent buffer
1318 * @priv: driver private data
1319 * @arg:  buffer handle returned by allocation routine
1320 */
1321static int rio_mport_inbound_free(struct file *filp, void __user *arg)
1322{
1323        struct mport_cdev_priv *priv = filp->private_data;
1324        struct mport_dev *md = priv->md;
1325        u64 handle;
1326        struct rio_mport_mapping *map, *_map;
1327
1328        rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp);
1329
1330        if (!md->mport->ops->unmap_inb)
1331                return -EPROTONOSUPPORT;
1332
1333        if (copy_from_user(&handle, arg, sizeof(handle)))
1334                return -EFAULT;
1335
1336        mutex_lock(&md->buf_mutex);
1337        list_for_each_entry_safe(map, _map, &md->mappings, node) {
1338                if (map->dir == MAP_INBOUND && map->phys_addr == handle) {
1339                        if (map->filp == filp) {
1340                                map->filp = NULL;
1341                                kref_put(&map->ref, mport_release_mapping);
1342                        }
1343                        break;
1344                }
1345        }
1346        mutex_unlock(&md->buf_mutex);
1347
1348        return 0;
1349}
1350
1351/*
1352 * maint_port_idx_get() - Get the port index of the mport instance
1353 * @priv: driver private data
1354 * @arg:  port index
1355 */
1356static int maint_port_idx_get(struct mport_cdev_priv *priv, void __user *arg)
1357{
1358        struct mport_dev *md = priv->md;
1359        u32 port_idx = md->mport->index;
1360
1361        rmcd_debug(MPORT, "port_index=%d", port_idx);
1362
1363        if (copy_to_user(arg, &port_idx, sizeof(port_idx)))
1364                return -EFAULT;
1365
1366        return 0;
1367}
1368
1369static int rio_mport_add_event(struct mport_cdev_priv *priv,
1370                               struct rio_event *event)
1371{
1372        int overflow;
1373
1374        if (!(priv->event_mask & event->header))
1375                return -EACCES;
1376
1377        spin_lock(&priv->fifo_lock);
1378        overflow = kfifo_avail(&priv->event_fifo) < sizeof(*event)
1379                || kfifo_in(&priv->event_fifo, (unsigned char *)event,
1380                        sizeof(*event)) != sizeof(*event);
1381        spin_unlock(&priv->fifo_lock);
1382
1383        wake_up_interruptible(&priv->event_rx_wait);
1384
1385        if (overflow) {
1386                dev_warn(&priv->md->dev, DRV_NAME ": event fifo overflow\n");
1387                return -EBUSY;
1388        }
1389
1390        return 0;
1391}
1392
1393static void rio_mport_doorbell_handler(struct rio_mport *mport, void *dev_id,
1394                                       u16 src, u16 dst, u16 info)
1395{
1396        struct mport_dev *data = dev_id;
1397        struct mport_cdev_priv *priv;
1398        struct rio_mport_db_filter *db_filter;
1399        struct rio_event event;
1400        int handled;
1401
1402        event.header = RIO_DOORBELL;
1403        event.u.doorbell.rioid = src;
1404        event.u.doorbell.payload = info;
1405
1406        handled = 0;
1407        spin_lock(&data->db_lock);
1408        list_for_each_entry(db_filter, &data->doorbells, data_node) {
1409                if (((db_filter->filter.rioid == RIO_INVALID_DESTID ||
1410                      db_filter->filter.rioid == src)) &&
1411                      info >= db_filter->filter.low &&
1412                      info <= db_filter->filter.high) {
1413                        priv = db_filter->priv;
1414                        rio_mport_add_event(priv, &event);
1415                        handled = 1;
1416                }
1417        }
1418        spin_unlock(&data->db_lock);
1419
1420        if (!handled)
1421                dev_warn(&data->dev,
1422                        "%s: spurious DB received from 0x%x, info=0x%04x\n",
1423                        __func__, src, info);
1424}
1425
1426static int rio_mport_add_db_filter(struct mport_cdev_priv *priv,
1427                                   void __user *arg)
1428{
1429        struct mport_dev *md = priv->md;
1430        struct rio_mport_db_filter *db_filter;
1431        struct rio_doorbell_filter filter;
1432        unsigned long flags;
1433        int ret;
1434
1435        if (copy_from_user(&filter, arg, sizeof(filter)))
1436                return -EFAULT;
1437
1438        if (filter.low > filter.high)
1439                return -EINVAL;
1440
1441        ret = rio_request_inb_dbell(md->mport, md, filter.low, filter.high,
1442                                    rio_mport_doorbell_handler);
1443        if (ret) {
1444                rmcd_error("%s failed to register IBDB, err=%d",
1445                           dev_name(&md->dev), ret);
1446                return ret;
1447        }
1448
1449        db_filter = kzalloc(sizeof(*db_filter), GFP_KERNEL);
1450        if (db_filter == NULL) {
1451                rio_release_inb_dbell(md->mport, filter.low, filter.high);
1452                return -ENOMEM;
1453        }
1454
1455        db_filter->filter = filter;
1456        db_filter->priv = priv;
1457        spin_lock_irqsave(&md->db_lock, flags);
1458        list_add_tail(&db_filter->priv_node, &priv->db_filters);
1459        list_add_tail(&db_filter->data_node, &md->doorbells);
1460        spin_unlock_irqrestore(&md->db_lock, flags);
1461
1462        return 0;
1463}
1464
1465static void rio_mport_delete_db_filter(struct rio_mport_db_filter *db_filter)
1466{
1467        list_del(&db_filter->data_node);
1468        list_del(&db_filter->priv_node);
1469        kfree(db_filter);
1470}
1471
1472static int rio_mport_remove_db_filter(struct mport_cdev_priv *priv,
1473                                      void __user *arg)
1474{
1475        struct rio_mport_db_filter *db_filter;
1476        struct rio_doorbell_filter filter;
1477        unsigned long flags;
1478        int ret = -EINVAL;
1479
1480        if (copy_from_user(&filter, arg, sizeof(filter)))
1481                return -EFAULT;
1482
1483        if (filter.low > filter.high)
1484                return -EINVAL;
1485
1486        spin_lock_irqsave(&priv->md->db_lock, flags);
1487        list_for_each_entry(db_filter, &priv->db_filters, priv_node) {
1488                if (db_filter->filter.rioid == filter.rioid &&
1489                    db_filter->filter.low == filter.low &&
1490                    db_filter->filter.high == filter.high) {
1491                        rio_mport_delete_db_filter(db_filter);
1492                        ret = 0;
1493                        break;
1494                }
1495        }
1496        spin_unlock_irqrestore(&priv->md->db_lock, flags);
1497
1498        if (!ret)
1499                rio_release_inb_dbell(priv->md->mport, filter.low, filter.high);
1500
1501        return ret;
1502}
1503
1504static int rio_mport_match_pw(union rio_pw_msg *msg,
1505                              struct rio_pw_filter *filter)
1506{
1507        if ((msg->em.comptag & filter->mask) < filter->low ||
1508                (msg->em.comptag & filter->mask) > filter->high)
1509                return 0;
1510        return 1;
1511}
1512
1513static int rio_mport_pw_handler(struct rio_mport *mport, void *context,
1514                                union rio_pw_msg *msg, int step)
1515{
1516        struct mport_dev *md = context;
1517        struct mport_cdev_priv *priv;
1518        struct rio_mport_pw_filter *pw_filter;
1519        struct rio_event event;
1520        int handled;
1521
1522        event.header = RIO_PORTWRITE;
1523        memcpy(event.u.portwrite.payload, msg->raw, RIO_PW_MSG_SIZE);
1524
1525        handled = 0;
1526        spin_lock(&md->pw_lock);
1527        list_for_each_entry(pw_filter, &md->portwrites, md_node) {
1528                if (rio_mport_match_pw(msg, &pw_filter->filter)) {
1529                        priv = pw_filter->priv;
1530                        rio_mport_add_event(priv, &event);
1531                        handled = 1;
1532                }
1533        }
1534        spin_unlock(&md->pw_lock);
1535
1536        if (!handled) {
1537                printk_ratelimited(KERN_WARNING DRV_NAME
1538                        ": mport%d received spurious PW from 0x%08x\n",
1539                        mport->id, msg->em.comptag);
1540        }
1541
1542        return 0;
1543}
1544
1545static int rio_mport_add_pw_filter(struct mport_cdev_priv *priv,
1546                                   void __user *arg)
1547{
1548        struct mport_dev *md = priv->md;
1549        struct rio_mport_pw_filter *pw_filter;
1550        struct rio_pw_filter filter;
1551        unsigned long flags;
1552        int hadd = 0;
1553
1554        if (copy_from_user(&filter, arg, sizeof(filter)))
1555                return -EFAULT;
1556
1557        pw_filter = kzalloc(sizeof(*pw_filter), GFP_KERNEL);
1558        if (pw_filter == NULL)
1559                return -ENOMEM;
1560
1561        pw_filter->filter = filter;
1562        pw_filter->priv = priv;
1563        spin_lock_irqsave(&md->pw_lock, flags);
1564        if (list_empty(&md->portwrites))
1565                hadd = 1;
1566        list_add_tail(&pw_filter->priv_node, &priv->pw_filters);
1567        list_add_tail(&pw_filter->md_node, &md->portwrites);
1568        spin_unlock_irqrestore(&md->pw_lock, flags);
1569
1570        if (hadd) {
1571                int ret;
1572
1573                ret = rio_add_mport_pw_handler(md->mport, md,
1574                                               rio_mport_pw_handler);
1575                if (ret) {
1576                        dev_err(&md->dev,
1577                                "%s: failed to add IB_PW handler, err=%d\n",
1578                                __func__, ret);
1579                        return ret;
1580                }
1581                rio_pw_enable(md->mport, 1);
1582        }
1583
1584        return 0;
1585}
1586
1587static void rio_mport_delete_pw_filter(struct rio_mport_pw_filter *pw_filter)
1588{
1589        list_del(&pw_filter->md_node);
1590        list_del(&pw_filter->priv_node);
1591        kfree(pw_filter);
1592}
1593
1594static int rio_mport_match_pw_filter(struct rio_pw_filter *a,
1595                                     struct rio_pw_filter *b)
1596{
1597        if ((a->mask == b->mask) && (a->low == b->low) && (a->high == b->high))
1598                return 1;
1599        return 0;
1600}
1601
1602static int rio_mport_remove_pw_filter(struct mport_cdev_priv *priv,
1603                                      void __user *arg)
1604{
1605        struct mport_dev *md = priv->md;
1606        struct rio_mport_pw_filter *pw_filter;
1607        struct rio_pw_filter filter;
1608        unsigned long flags;
1609        int ret = -EINVAL;
1610        int hdel = 0;
1611
1612        if (copy_from_user(&filter, arg, sizeof(filter)))
1613                return -EFAULT;
1614
1615        spin_lock_irqsave(&md->pw_lock, flags);
1616        list_for_each_entry(pw_filter, &priv->pw_filters, priv_node) {
1617                if (rio_mport_match_pw_filter(&pw_filter->filter, &filter)) {
1618                        rio_mport_delete_pw_filter(pw_filter);
1619                        ret = 0;
1620                        break;
1621                }
1622        }
1623
1624        if (list_empty(&md->portwrites))
1625                hdel = 1;
1626        spin_unlock_irqrestore(&md->pw_lock, flags);
1627
1628        if (hdel) {
1629                rio_del_mport_pw_handler(md->mport, priv->md,
1630                                         rio_mport_pw_handler);
1631                rio_pw_enable(md->mport, 0);
1632        }
1633
1634        return ret;
1635}
1636
1637/*
1638 * rio_release_dev - release routine for kernel RIO device object
1639 * @dev: kernel device object associated with a RIO device structure
1640 *
1641 * Frees a RIO device struct associated a RIO device struct.
1642 * The RIO device struct is freed.
1643 */
1644static void rio_release_dev(struct device *dev)
1645{
1646        struct rio_dev *rdev;
1647
1648        rdev = to_rio_dev(dev);
1649        pr_info(DRV_PREFIX "%s: %s\n", __func__, rio_name(rdev));
1650        kfree(rdev);
1651}
1652
1653
1654static void rio_release_net(struct device *dev)
1655{
1656        struct rio_net *net;
1657
1658        net = to_rio_net(dev);
1659        rmcd_debug(RDEV, "net_%d", net->id);
1660        kfree(net);
1661}
1662
1663
1664/*
1665 * rio_mport_add_riodev - creates a kernel RIO device object
1666 *
1667 * Allocates a RIO device data structure and initializes required fields based
1668 * on device's configuration space contents.
1669 * If the device has switch capabilities, then a switch specific portion is
1670 * allocated and configured.
1671 */
1672static int rio_mport_add_riodev(struct mport_cdev_priv *priv,
1673                                   void __user *arg)
1674{
1675        struct mport_dev *md = priv->md;
1676        struct rio_rdev_info dev_info;
1677        struct rio_dev *rdev;
1678        struct rio_switch *rswitch = NULL;
1679        struct rio_mport *mport;
1680        size_t size;
1681        u32 rval;
1682        u32 swpinfo = 0;
1683        u16 destid;
1684        u8 hopcount;
1685        int err;
1686
1687        if (copy_from_user(&dev_info, arg, sizeof(dev_info)))
1688                return -EFAULT;
1689        dev_info.name[sizeof(dev_info.name) - 1] = '\0';
1690
1691        rmcd_debug(RDEV, "name:%s ct:0x%x did:0x%x hc:0x%x", dev_info.name,
1692                   dev_info.comptag, dev_info.destid, dev_info.hopcount);
1693
1694        if (bus_find_device_by_name(&rio_bus_type, NULL, dev_info.name)) {
1695                rmcd_debug(RDEV, "device %s already exists", dev_info.name);
1696                return -EEXIST;
1697        }
1698
1699        size = sizeof(*rdev);
1700        mport = md->mport;
1701        destid = dev_info.destid;
1702        hopcount = dev_info.hopcount;
1703
1704        if (rio_mport_read_config_32(mport, destid, hopcount,
1705                                     RIO_PEF_CAR, &rval))
1706                return -EIO;
1707
1708        if (rval & RIO_PEF_SWITCH) {
1709                rio_mport_read_config_32(mport, destid, hopcount,
1710                                         RIO_SWP_INFO_CAR, &swpinfo);
1711                size += (RIO_GET_TOTAL_PORTS(swpinfo) *
1712                         sizeof(rswitch->nextdev[0])) + sizeof(*rswitch);
1713        }
1714
1715        rdev = kzalloc(size, GFP_KERNEL);
1716        if (rdev == NULL)
1717                return -ENOMEM;
1718
1719        if (mport->net == NULL) {
1720                struct rio_net *net;
1721
1722                net = rio_alloc_net(mport);
1723                if (!net) {
1724                        err = -ENOMEM;
1725                        rmcd_debug(RDEV, "failed to allocate net object");
1726                        goto cleanup;
1727                }
1728
1729                net->id = mport->id;
1730                net->hport = mport;
1731                dev_set_name(&net->dev, "rnet_%d", net->id);
1732                net->dev.parent = &mport->dev;
1733                net->dev.release = rio_release_net;
1734                err = rio_add_net(net);
1735                if (err) {
1736                        rmcd_debug(RDEV, "failed to register net, err=%d", err);
1737                        kfree(net);
1738                        goto cleanup;
1739                }
1740        }
1741
1742        rdev->net = mport->net;
1743        rdev->pef = rval;
1744        rdev->swpinfo = swpinfo;
1745        rio_mport_read_config_32(mport, destid, hopcount,
1746                                 RIO_DEV_ID_CAR, &rval);
1747        rdev->did = rval >> 16;
1748        rdev->vid = rval & 0xffff;
1749        rio_mport_read_config_32(mport, destid, hopcount, RIO_DEV_INFO_CAR,
1750                                 &rdev->device_rev);
1751        rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_ID_CAR,
1752                                 &rval);
1753        rdev->asm_did = rval >> 16;
1754        rdev->asm_vid = rval & 0xffff;
1755        rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_INFO_CAR,
1756                                 &rval);
1757        rdev->asm_rev = rval >> 16;
1758
1759        if (rdev->pef & RIO_PEF_EXT_FEATURES) {
1760                rdev->efptr = rval & 0xffff;
1761                rdev->phys_efptr = rio_mport_get_physefb(mport, 0, destid,
1762                                                hopcount, &rdev->phys_rmap);
1763
1764                rdev->em_efptr = rio_mport_get_feature(mport, 0, destid,
1765                                                hopcount, RIO_EFB_ERR_MGMNT);
1766        }
1767
1768        rio_mport_read_config_32(mport, destid, hopcount, RIO_SRC_OPS_CAR,
1769                                 &rdev->src_ops);
1770        rio_mport_read_config_32(mport, destid, hopcount, RIO_DST_OPS_CAR,
1771                                 &rdev->dst_ops);
1772
1773        rdev->comp_tag = dev_info.comptag;
1774        rdev->destid = destid;
1775        /* hopcount is stored as specified by a caller, regardles of EP or SW */
1776        rdev->hopcount = hopcount;
1777
1778        if (rdev->pef & RIO_PEF_SWITCH) {
1779                rswitch = rdev->rswitch;
1780                rswitch->route_table = NULL;
1781        }
1782
1783        if (strlen(dev_info.name))
1784                dev_set_name(&rdev->dev, "%s", dev_info.name);
1785        else if (rdev->pef & RIO_PEF_SWITCH)
1786                dev_set_name(&rdev->dev, "%02x:s:%04x", mport->id,
1787                             rdev->comp_tag & RIO_CTAG_UDEVID);
1788        else
1789                dev_set_name(&rdev->dev, "%02x:e:%04x", mport->id,
1790                             rdev->comp_tag & RIO_CTAG_UDEVID);
1791
1792        INIT_LIST_HEAD(&rdev->net_list);
1793        rdev->dev.parent = &mport->net->dev;
1794        rio_attach_device(rdev);
1795        rdev->dev.release = rio_release_dev;
1796
1797        if (rdev->dst_ops & RIO_DST_OPS_DOORBELL)
1798                rio_init_dbell_res(&rdev->riores[RIO_DOORBELL_RESOURCE],
1799                                   0, 0xffff);
1800        err = rio_add_device(rdev);
1801        if (err)
1802                goto cleanup;
1803        rio_dev_get(rdev);
1804
1805        return 0;
1806cleanup:
1807        kfree(rdev);
1808        return err;
1809}
1810
1811static int rio_mport_del_riodev(struct mport_cdev_priv *priv, void __user *arg)
1812{
1813        struct rio_rdev_info dev_info;
1814        struct rio_dev *rdev = NULL;
1815        struct device  *dev;
1816        struct rio_mport *mport;
1817        struct rio_net *net;
1818
1819        if (copy_from_user(&dev_info, arg, sizeof(dev_info)))
1820                return -EFAULT;
1821        dev_info.name[sizeof(dev_info.name) - 1] = '\0';
1822
1823        mport = priv->md->mport;
1824
1825        /* If device name is specified, removal by name has priority */
1826        if (strlen(dev_info.name)) {
1827                dev = bus_find_device_by_name(&rio_bus_type, NULL,
1828                                              dev_info.name);
1829                if (dev)
1830                        rdev = to_rio_dev(dev);
1831        } else {
1832                do {
1833                        rdev = rio_get_comptag(dev_info.comptag, rdev);
1834                        if (rdev && rdev->dev.parent == &mport->net->dev &&
1835                            rdev->destid == dev_info.destid &&
1836                            rdev->hopcount == dev_info.hopcount)
1837                                break;
1838                } while (rdev);
1839        }
1840
1841        if (!rdev) {
1842                rmcd_debug(RDEV,
1843                        "device name:%s ct:0x%x did:0x%x hc:0x%x not found",
1844                        dev_info.name, dev_info.comptag, dev_info.destid,
1845                        dev_info.hopcount);
1846                return -ENODEV;
1847        }
1848
1849        net = rdev->net;
1850        rio_dev_put(rdev);
1851        rio_del_device(rdev, RIO_DEVICE_SHUTDOWN);
1852
1853        if (list_empty(&net->devices)) {
1854                rio_free_net(net);
1855                mport->net = NULL;
1856        }
1857
1858        return 0;
1859}
1860
1861/*
1862 * Mport cdev management
1863 */
1864
1865/*
1866 * mport_cdev_open() - Open character device (mport)
1867 */
1868static int mport_cdev_open(struct inode *inode, struct file *filp)
1869{
1870        int ret;
1871        int minor = iminor(inode);
1872        struct mport_dev *chdev;
1873        struct mport_cdev_priv *priv;
1874
1875        /* Test for valid device */
1876        if (minor >= RIO_MAX_MPORTS) {
1877                rmcd_error("Invalid minor device number");
1878                return -EINVAL;
1879        }
1880
1881        chdev = container_of(inode->i_cdev, struct mport_dev, cdev);
1882
1883        rmcd_debug(INIT, "%s filp=%p", dev_name(&chdev->dev), filp);
1884
1885        if (atomic_read(&chdev->active) == 0)
1886                return -ENODEV;
1887
1888        get_device(&chdev->dev);
1889
1890        priv = kzalloc(sizeof(*priv), GFP_KERNEL);
1891        if (!priv) {
1892                put_device(&chdev->dev);
1893                return -ENOMEM;
1894        }
1895
1896        priv->md = chdev;
1897
1898        mutex_lock(&chdev->file_mutex);
1899        list_add_tail(&priv->list, &chdev->file_list);
1900        mutex_unlock(&chdev->file_mutex);
1901
1902        INIT_LIST_HEAD(&priv->db_filters);
1903        INIT_LIST_HEAD(&priv->pw_filters);
1904        spin_lock_init(&priv->fifo_lock);
1905        init_waitqueue_head(&priv->event_rx_wait);
1906        ret = kfifo_alloc(&priv->event_fifo,
1907                          sizeof(struct rio_event) * MPORT_EVENT_DEPTH,
1908                          GFP_KERNEL);
1909        if (ret < 0) {
1910                dev_err(&chdev->dev, DRV_NAME ": kfifo_alloc failed\n");
1911                ret = -ENOMEM;
1912                goto err_fifo;
1913        }
1914
1915#ifdef CONFIG_RAPIDIO_DMA_ENGINE
1916        INIT_LIST_HEAD(&priv->async_list);
1917        spin_lock_init(&priv->req_lock);
1918        mutex_init(&priv->dma_lock);
1919#endif
1920
1921        filp->private_data = priv;
1922        goto out;
1923err_fifo:
1924        kfree(priv);
1925out:
1926        return ret;
1927}
1928
1929static int mport_cdev_fasync(int fd, struct file *filp, int mode)
1930{
1931        struct mport_cdev_priv *priv = filp->private_data;
1932
1933        return fasync_helper(fd, filp, mode, &priv->async_queue);
1934}
1935
1936#ifdef CONFIG_RAPIDIO_DMA_ENGINE
1937static void mport_cdev_release_dma(struct file *filp)
1938{
1939        struct mport_cdev_priv *priv = filp->private_data;
1940        struct mport_dev *md;
1941        struct mport_dma_req *req, *req_next;
1942        unsigned long tmo = msecs_to_jiffies(dma_timeout);
1943        long wret;
1944        LIST_HEAD(list);
1945
1946        rmcd_debug(EXIT, "from filp=%p %s(%d)",
1947                   filp, current->comm, task_pid_nr(current));
1948
1949        if (!priv->dmach) {
1950                rmcd_debug(EXIT, "No DMA channel for filp=%p", filp);
1951                return;
1952        }
1953
1954        md = priv->md;
1955
1956        spin_lock(&priv->req_lock);
1957        if (!list_empty(&priv->async_list)) {
1958                rmcd_debug(EXIT, "async list not empty filp=%p %s(%d)",
1959                           filp, current->comm, task_pid_nr(current));
1960                list_splice_init(&priv->async_list, &list);
1961        }
1962        spin_unlock(&priv->req_lock);
1963
1964        if (!list_empty(&list)) {
1965                rmcd_debug(EXIT, "temp list not empty");
1966                list_for_each_entry_safe(req, req_next, &list, node) {
1967                        rmcd_debug(EXIT, "free req->filp=%p cookie=%d compl=%s",
1968                                   req->filp, req->cookie,
1969                                   completion_done(&req->req_comp)?"yes":"no");
1970                        list_del(&req->node);
1971                        kref_put(&req->refcount, dma_req_free);
1972                }
1973        }
1974
1975        put_dma_channel(priv);
1976        wret = wait_for_completion_interruptible_timeout(&priv->comp, tmo);
1977
1978        if (wret <= 0) {
1979                rmcd_error("%s(%d) failed waiting for DMA release err=%ld",
1980                        current->comm, task_pid_nr(current), wret);
1981        }
1982
1983        if (priv->dmach != priv->md->dma_chan) {
1984                rmcd_debug(EXIT, "Release DMA channel for filp=%p %s(%d)",
1985                           filp, current->comm, task_pid_nr(current));
1986                rio_release_dma(priv->dmach);
1987        } else {
1988                rmcd_debug(EXIT, "Adjust default DMA channel refcount");
1989                kref_put(&md->dma_ref, mport_release_def_dma);
1990        }
1991
1992        priv->dmach = NULL;
1993}
1994#else
1995#define mport_cdev_release_dma(priv) do {} while (0)
1996#endif
1997
1998/*
1999 * mport_cdev_release() - Release character device
2000 */
2001static int mport_cdev_release(struct inode *inode, struct file *filp)
2002{
2003        struct mport_cdev_priv *priv = filp->private_data;
2004        struct mport_dev *chdev;
2005        struct rio_mport_pw_filter *pw_filter, *pw_filter_next;
2006        struct rio_mport_db_filter *db_filter, *db_filter_next;
2007        struct rio_mport_mapping *map, *_map;
2008        unsigned long flags;
2009
2010        rmcd_debug(EXIT, "%s filp=%p", dev_name(&priv->md->dev), filp);
2011
2012        chdev = priv->md;
2013        mport_cdev_release_dma(filp);
2014
2015        priv->event_mask = 0;
2016
2017        spin_lock_irqsave(&chdev->pw_lock, flags);
2018        if (!list_empty(&priv->pw_filters)) {
2019                list_for_each_entry_safe(pw_filter, pw_filter_next,
2020                                         &priv->pw_filters, priv_node)
2021                        rio_mport_delete_pw_filter(pw_filter);
2022        }
2023        spin_unlock_irqrestore(&chdev->pw_lock, flags);
2024
2025        spin_lock_irqsave(&chdev->db_lock, flags);
2026        list_for_each_entry_safe(db_filter, db_filter_next,
2027                                 &priv->db_filters, priv_node) {
2028                rio_mport_delete_db_filter(db_filter);
2029        }
2030        spin_unlock_irqrestore(&chdev->db_lock, flags);
2031
2032        kfifo_free(&priv->event_fifo);
2033
2034        mutex_lock(&chdev->buf_mutex);
2035        list_for_each_entry_safe(map, _map, &chdev->mappings, node) {
2036                if (map->filp == filp) {
2037                        rmcd_debug(EXIT, "release mapping %p filp=%p",
2038                                   map->virt_addr, filp);
2039                        kref_put(&map->ref, mport_release_mapping);
2040                }
2041        }
2042        mutex_unlock(&chdev->buf_mutex);
2043
2044        mport_cdev_fasync(-1, filp, 0);
2045        filp->private_data = NULL;
2046        mutex_lock(&chdev->file_mutex);
2047        list_del(&priv->list);
2048        mutex_unlock(&chdev->file_mutex);
2049        put_device(&chdev->dev);
2050        kfree(priv);
2051        return 0;
2052}
2053
2054/*
2055 * mport_cdev_ioctl() - IOCTLs for character device
2056 */
2057static long mport_cdev_ioctl(struct file *filp,
2058                unsigned int cmd, unsigned long arg)
2059{
2060        int err = -EINVAL;
2061        struct mport_cdev_priv *data = filp->private_data;
2062        struct mport_dev *md = data->md;
2063
2064        if (atomic_read(&md->active) == 0)
2065                return -ENODEV;
2066
2067        switch (cmd) {
2068        case RIO_MPORT_MAINT_READ_LOCAL:
2069                return rio_mport_maint_rd(data, (void __user *)arg, 1);
2070        case RIO_MPORT_MAINT_WRITE_LOCAL:
2071                return rio_mport_maint_wr(data, (void __user *)arg, 1);
2072        case RIO_MPORT_MAINT_READ_REMOTE:
2073                return rio_mport_maint_rd(data, (void __user *)arg, 0);
2074        case RIO_MPORT_MAINT_WRITE_REMOTE:
2075                return rio_mport_maint_wr(data, (void __user *)arg, 0);
2076        case RIO_MPORT_MAINT_HDID_SET:
2077                return maint_hdid_set(data, (void __user *)arg);
2078        case RIO_MPORT_MAINT_COMPTAG_SET:
2079                return maint_comptag_set(data, (void __user *)arg);
2080        case RIO_MPORT_MAINT_PORT_IDX_GET:
2081                return maint_port_idx_get(data, (void __user *)arg);
2082        case RIO_MPORT_GET_PROPERTIES:
2083                md->properties.hdid = md->mport->host_deviceid;
2084                if (copy_to_user((void __user *)arg, &(md->properties),
2085                                 sizeof(md->properties)))
2086                        return -EFAULT;
2087                return 0;
2088        case RIO_ENABLE_DOORBELL_RANGE:
2089                return rio_mport_add_db_filter(data, (void __user *)arg);
2090        case RIO_DISABLE_DOORBELL_RANGE:
2091                return rio_mport_remove_db_filter(data, (void __user *)arg);
2092        case RIO_ENABLE_PORTWRITE_RANGE:
2093                return rio_mport_add_pw_filter(data, (void __user *)arg);
2094        case RIO_DISABLE_PORTWRITE_RANGE:
2095                return rio_mport_remove_pw_filter(data, (void __user *)arg);
2096        case RIO_SET_EVENT_MASK:
2097                data->event_mask = (u32)arg;
2098                return 0;
2099        case RIO_GET_EVENT_MASK:
2100                if (copy_to_user((void __user *)arg, &data->event_mask,
2101                                    sizeof(u32)))
2102                        return -EFAULT;
2103                return 0;
2104        case RIO_MAP_OUTBOUND:
2105                return rio_mport_obw_map(filp, (void __user *)arg);
2106        case RIO_MAP_INBOUND:
2107                return rio_mport_map_inbound(filp, (void __user *)arg);
2108        case RIO_UNMAP_OUTBOUND:
2109                return rio_mport_obw_free(filp, (void __user *)arg);
2110        case RIO_UNMAP_INBOUND:
2111                return rio_mport_inbound_free(filp, (void __user *)arg);
2112        case RIO_ALLOC_DMA:
2113                return rio_mport_alloc_dma(filp, (void __user *)arg);
2114        case RIO_FREE_DMA:
2115                return rio_mport_free_dma(filp, (void __user *)arg);
2116        case RIO_WAIT_FOR_ASYNC:
2117                return rio_mport_wait_for_async_dma(filp, (void __user *)arg);
2118        case RIO_TRANSFER:
2119                return rio_mport_transfer_ioctl(filp, (void __user *)arg);
2120        case RIO_DEV_ADD:
2121                return rio_mport_add_riodev(data, (void __user *)arg);
2122        case RIO_DEV_DEL:
2123                return rio_mport_del_riodev(data, (void __user *)arg);
2124        default:
2125                break;
2126        }
2127
2128        return err;
2129}
2130
2131/*
2132 * mport_release_mapping - free mapping resources and info structure
2133 * @ref: a pointer to the kref within struct rio_mport_mapping
2134 *
2135 * NOTE: Shall be called while holding buf_mutex.
2136 */
2137static void mport_release_mapping(struct kref *ref)
2138{
2139        struct rio_mport_mapping *map =
2140                        container_of(ref, struct rio_mport_mapping, ref);
2141        struct rio_mport *mport = map->md->mport;
2142
2143        rmcd_debug(MMAP, "type %d mapping @ %p (phys = %pad) for %s",
2144                   map->dir, map->virt_addr,
2145                   &map->phys_addr, mport->name);
2146
2147        list_del(&map->node);
2148
2149        switch (map->dir) {
2150        case MAP_INBOUND:
2151                rio_unmap_inb_region(mport, map->phys_addr);
2152                /* fall through */
2153        case MAP_DMA:
2154                dma_free_coherent(mport->dev.parent, map->size,
2155                                  map->virt_addr, map->phys_addr);
2156                break;
2157        case MAP_OUTBOUND:
2158                rio_unmap_outb_region(mport, map->rioid, map->rio_addr);
2159                break;
2160        }
2161        kfree(map);
2162}
2163
2164static void mport_mm_open(struct vm_area_struct *vma)
2165{
2166        struct rio_mport_mapping *map = vma->vm_private_data;
2167
2168        rmcd_debug(MMAP, "%pad", &map->phys_addr);
2169        kref_get(&map->ref);
2170}
2171
2172static void mport_mm_close(struct vm_area_struct *vma)
2173{
2174        struct rio_mport_mapping *map = vma->vm_private_data;
2175
2176        rmcd_debug(MMAP, "%pad", &map->phys_addr);
2177        mutex_lock(&map->md->buf_mutex);
2178        kref_put(&map->ref, mport_release_mapping);
2179        mutex_unlock(&map->md->buf_mutex);
2180}
2181
2182static const struct vm_operations_struct vm_ops = {
2183        .open = mport_mm_open,
2184        .close = mport_mm_close,
2185};
2186
2187static int mport_cdev_mmap(struct file *filp, struct vm_area_struct *vma)
2188{
2189        struct mport_cdev_priv *priv = filp->private_data;
2190        struct mport_dev *md;
2191        size_t size = vma->vm_end - vma->vm_start;
2192        dma_addr_t baddr;
2193        unsigned long offset;
2194        int found = 0, ret;
2195        struct rio_mport_mapping *map;
2196
2197        rmcd_debug(MMAP, "0x%x bytes at offset 0x%lx",
2198                   (unsigned int)size, vma->vm_pgoff);
2199
2200        md = priv->md;
2201        baddr = ((dma_addr_t)vma->vm_pgoff << PAGE_SHIFT);
2202
2203        mutex_lock(&md->buf_mutex);
2204        list_for_each_entry(map, &md->mappings, node) {
2205                if (baddr >= map->phys_addr &&
2206                    baddr < (map->phys_addr + map->size)) {
2207                        found = 1;
2208                        break;
2209                }
2210        }
2211        mutex_unlock(&md->buf_mutex);
2212
2213        if (!found)
2214                return -ENOMEM;
2215
2216        offset = baddr - map->phys_addr;
2217
2218        if (size + offset > map->size)
2219                return -EINVAL;
2220
2221        vma->vm_pgoff = offset >> PAGE_SHIFT;
2222        rmcd_debug(MMAP, "MMAP adjusted offset = 0x%lx", vma->vm_pgoff);
2223
2224        if (map->dir == MAP_INBOUND || map->dir == MAP_DMA)
2225                ret = dma_mmap_coherent(md->mport->dev.parent, vma,
2226                                map->virt_addr, map->phys_addr, map->size);
2227        else if (map->dir == MAP_OUTBOUND) {
2228                vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
2229                ret = vm_iomap_memory(vma, map->phys_addr, map->size);
2230        } else {
2231                rmcd_error("Attempt to mmap unsupported mapping type");
2232                ret = -EIO;
2233        }
2234
2235        if (!ret) {
2236                vma->vm_private_data = map;
2237                vma->vm_ops = &vm_ops;
2238                mport_mm_open(vma);
2239        } else {
2240                rmcd_error("MMAP exit with err=%d", ret);
2241        }
2242
2243        return ret;
2244}
2245
2246static __poll_t mport_cdev_poll(struct file *filp, poll_table *wait)
2247{
2248        struct mport_cdev_priv *priv = filp->private_data;
2249
2250        poll_wait(filp, &priv->event_rx_wait, wait);
2251        if (kfifo_len(&priv->event_fifo))
2252                return EPOLLIN | EPOLLRDNORM;
2253
2254        return 0;
2255}
2256
2257static ssize_t mport_read(struct file *filp, char __user *buf, size_t count,
2258                        loff_t *ppos)
2259{
2260        struct mport_cdev_priv *priv = filp->private_data;
2261        int copied;
2262        ssize_t ret;
2263
2264        if (!count)
2265                return 0;
2266
2267        if (kfifo_is_empty(&priv->event_fifo) &&
2268            (filp->f_flags & O_NONBLOCK))
2269                return -EAGAIN;
2270
2271        if (count % sizeof(struct rio_event))
2272                return -EINVAL;
2273
2274        ret = wait_event_interruptible(priv->event_rx_wait,
2275                                        kfifo_len(&priv->event_fifo) != 0);
2276        if (ret)
2277                return ret;
2278
2279        while (ret < count) {
2280                if (kfifo_to_user(&priv->event_fifo, buf,
2281                      sizeof(struct rio_event), &copied))
2282                        return -EFAULT;
2283                ret += copied;
2284                buf += copied;
2285        }
2286
2287        return ret;
2288}
2289
2290static ssize_t mport_write(struct file *filp, const char __user *buf,
2291                         size_t count, loff_t *ppos)
2292{
2293        struct mport_cdev_priv *priv = filp->private_data;
2294        struct rio_mport *mport = priv->md->mport;
2295        struct rio_event event;
2296        int len, ret;
2297
2298        if (!count)
2299                return 0;
2300
2301        if (count % sizeof(event))
2302                return -EINVAL;
2303
2304        len = 0;
2305        while ((count - len) >= (int)sizeof(event)) {
2306                if (copy_from_user(&event, buf, sizeof(event)))
2307                        return -EFAULT;
2308
2309                if (event.header != RIO_DOORBELL)
2310                        return -EINVAL;
2311
2312                ret = rio_mport_send_doorbell(mport,
2313                                              event.u.doorbell.rioid,
2314                                              event.u.doorbell.payload);
2315                if (ret < 0)
2316                        return ret;
2317
2318                len += sizeof(event);
2319                buf += sizeof(event);
2320        }
2321
2322        return len;
2323}
2324
2325static const struct file_operations mport_fops = {
2326        .owner          = THIS_MODULE,
2327        .open           = mport_cdev_open,
2328        .release        = mport_cdev_release,
2329        .poll           = mport_cdev_poll,
2330        .read           = mport_read,
2331        .write          = mport_write,
2332        .mmap           = mport_cdev_mmap,
2333        .fasync         = mport_cdev_fasync,
2334        .unlocked_ioctl = mport_cdev_ioctl
2335};
2336
2337/*
2338 * Character device management
2339 */
2340
2341static void mport_device_release(struct device *dev)
2342{
2343        struct mport_dev *md;
2344
2345        rmcd_debug(EXIT, "%s", dev_name(dev));
2346        md = container_of(dev, struct mport_dev, dev);
2347        kfree(md);
2348}
2349
2350/*
2351 * mport_cdev_add() - Create mport_dev from rio_mport
2352 * @mport:      RapidIO master port
2353 */
2354static struct mport_dev *mport_cdev_add(struct rio_mport *mport)
2355{
2356        int ret = 0;
2357        struct mport_dev *md;
2358        struct rio_mport_attr attr;
2359
2360        md = kzalloc(sizeof(*md), GFP_KERNEL);
2361        if (!md) {
2362                rmcd_error("Unable allocate a device object");
2363                return NULL;
2364        }
2365
2366        md->mport = mport;
2367        mutex_init(&md->buf_mutex);
2368        mutex_init(&md->file_mutex);
2369        INIT_LIST_HEAD(&md->file_list);
2370
2371        device_initialize(&md->dev);
2372        md->dev.devt = MKDEV(MAJOR(dev_number), mport->id);
2373        md->dev.class = dev_class;
2374        md->dev.parent = &mport->dev;
2375        md->dev.release = mport_device_release;
2376        dev_set_name(&md->dev, DEV_NAME "%d", mport->id);
2377        atomic_set(&md->active, 1);
2378
2379        cdev_init(&md->cdev, &mport_fops);
2380        md->cdev.owner = THIS_MODULE;
2381
2382        ret = cdev_device_add(&md->cdev, &md->dev);
2383        if (ret) {
2384                rmcd_error("Failed to register mport %d (err=%d)",
2385                       mport->id, ret);
2386                goto err_cdev;
2387        }
2388
2389        INIT_LIST_HEAD(&md->doorbells);
2390        spin_lock_init(&md->db_lock);
2391        INIT_LIST_HEAD(&md->portwrites);
2392        spin_lock_init(&md->pw_lock);
2393        INIT_LIST_HEAD(&md->mappings);
2394
2395        md->properties.id = mport->id;
2396        md->properties.sys_size = mport->sys_size;
2397        md->properties.hdid = mport->host_deviceid;
2398        md->properties.index = mport->index;
2399
2400        /* The transfer_mode property will be returned through mport query
2401         * interface
2402         */
2403#ifdef CONFIG_FSL_RIO /* for now: only on Freescale's SoCs */
2404        md->properties.transfer_mode |= RIO_TRANSFER_MODE_MAPPED;
2405#else
2406        md->properties.transfer_mode |= RIO_TRANSFER_MODE_TRANSFER;
2407#endif
2408        ret = rio_query_mport(mport, &attr);
2409        if (!ret) {
2410                md->properties.flags = attr.flags;
2411                md->properties.link_speed = attr.link_speed;
2412                md->properties.link_width = attr.link_width;
2413                md->properties.dma_max_sge = attr.dma_max_sge;
2414                md->properties.dma_max_size = attr.dma_max_size;
2415                md->properties.dma_align = attr.dma_align;
2416                md->properties.cap_sys_size = 0;
2417                md->properties.cap_transfer_mode = 0;
2418                md->properties.cap_addr_size = 0;
2419        } else
2420                pr_info(DRV_PREFIX "Failed to obtain info for %s cdev(%d:%d)\n",
2421                        mport->name, MAJOR(dev_number), mport->id);
2422
2423        mutex_lock(&mport_devs_lock);
2424        list_add_tail(&md->node, &mport_devs);
2425        mutex_unlock(&mport_devs_lock);
2426
2427        pr_info(DRV_PREFIX "Added %s cdev(%d:%d)\n",
2428                mport->name, MAJOR(dev_number), mport->id);
2429
2430        return md;
2431
2432err_cdev:
2433        put_device(&md->dev);
2434        return NULL;
2435}
2436
2437/*
2438 * mport_cdev_terminate_dma() - Stop all active DMA data transfers and release
2439 *                              associated DMA channels.
2440 */
2441static void mport_cdev_terminate_dma(struct mport_dev *md)
2442{
2443#ifdef CONFIG_RAPIDIO_DMA_ENGINE
2444        struct mport_cdev_priv *client;
2445
2446        rmcd_debug(DMA, "%s", dev_name(&md->dev));
2447
2448        mutex_lock(&md->file_mutex);
2449        list_for_each_entry(client, &md->file_list, list) {
2450                if (client->dmach) {
2451                        dmaengine_terminate_all(client->dmach);
2452                        rio_release_dma(client->dmach);
2453                }
2454        }
2455        mutex_unlock(&md->file_mutex);
2456
2457        if (md->dma_chan) {
2458                dmaengine_terminate_all(md->dma_chan);
2459                rio_release_dma(md->dma_chan);
2460                md->dma_chan = NULL;
2461        }
2462#endif
2463}
2464
2465
2466/*
2467 * mport_cdev_kill_fasync() - Send SIGIO signal to all processes with open
2468 *                            mport_cdev files.
2469 */
2470static int mport_cdev_kill_fasync(struct mport_dev *md)
2471{
2472        unsigned int files = 0;
2473        struct mport_cdev_priv *client;
2474
2475        mutex_lock(&md->file_mutex);
2476        list_for_each_entry(client, &md->file_list, list) {
2477                if (client->async_queue)
2478                        kill_fasync(&client->async_queue, SIGIO, POLL_HUP);
2479                files++;
2480        }
2481        mutex_unlock(&md->file_mutex);
2482        return files;
2483}
2484
2485/*
2486 * mport_cdev_remove() - Remove mport character device
2487 * @dev:        Mport device to remove
2488 */
2489static void mport_cdev_remove(struct mport_dev *md)
2490{
2491        struct rio_mport_mapping *map, *_map;
2492
2493        rmcd_debug(EXIT, "Remove %s cdev", md->mport->name);
2494        atomic_set(&md->active, 0);
2495        mport_cdev_terminate_dma(md);
2496        rio_del_mport_pw_handler(md->mport, md, rio_mport_pw_handler);
2497        cdev_device_del(&md->cdev, &md->dev);
2498        mport_cdev_kill_fasync(md);
2499
2500        /* TODO: do we need to give clients some time to close file
2501         * descriptors? Simple wait for XX, or kref?
2502         */
2503
2504        /*
2505         * Release DMA buffers allocated for the mport device.
2506         * Disable associated inbound Rapidio requests mapping if applicable.
2507         */
2508        mutex_lock(&md->buf_mutex);
2509        list_for_each_entry_safe(map, _map, &md->mappings, node) {
2510                kref_put(&map->ref, mport_release_mapping);
2511        }
2512        mutex_unlock(&md->buf_mutex);
2513
2514        if (!list_empty(&md->mappings))
2515                rmcd_warn("WARNING: %s pending mappings on removal",
2516                          md->mport->name);
2517
2518        rio_release_inb_dbell(md->mport, 0, 0x0fff);
2519
2520        put_device(&md->dev);
2521}
2522
2523/*
2524 * RIO rio_mport_interface driver
2525 */
2526
2527/*
2528 * mport_add_mport() - Add rio_mport from LDM device struct
2529 * @dev:                Linux device model struct
2530 * @class_intf: Linux class_interface
2531 */
2532static int mport_add_mport(struct device *dev,
2533                struct class_interface *class_intf)
2534{
2535        struct rio_mport *mport = NULL;
2536        struct mport_dev *chdev = NULL;
2537
2538        mport = to_rio_mport(dev);
2539        if (!mport)
2540                return -ENODEV;
2541
2542        chdev = mport_cdev_add(mport);
2543        if (!chdev)
2544                return -ENODEV;
2545
2546        return 0;
2547}
2548
2549/*
2550 * mport_remove_mport() - Remove rio_mport from global list
2551 * TODO remove device from global mport_dev list
2552 */
2553static void mport_remove_mport(struct device *dev,
2554                struct class_interface *class_intf)
2555{
2556        struct rio_mport *mport = NULL;
2557        struct mport_dev *chdev;
2558        int found = 0;
2559
2560        mport = to_rio_mport(dev);
2561        rmcd_debug(EXIT, "Remove %s", mport->name);
2562
2563        mutex_lock(&mport_devs_lock);
2564        list_for_each_entry(chdev, &mport_devs, node) {
2565                if (chdev->mport->id == mport->id) {
2566                        atomic_set(&chdev->active, 0);
2567                        list_del(&chdev->node);
2568                        found = 1;
2569                        break;
2570                }
2571        }
2572        mutex_unlock(&mport_devs_lock);
2573
2574        if (found)
2575                mport_cdev_remove(chdev);
2576}
2577
2578/* the rio_mport_interface is used to handle local mport devices */
2579static struct class_interface rio_mport_interface __refdata = {
2580        .class          = &rio_mport_class,
2581        .add_dev        = mport_add_mport,
2582        .remove_dev     = mport_remove_mport,
2583};
2584
2585/*
2586 * Linux kernel module
2587 */
2588
2589/*
2590 * mport_init - Driver module loading
2591 */
2592static int __init mport_init(void)
2593{
2594        int ret;
2595
2596        /* Create device class needed by udev */
2597        dev_class = class_create(THIS_MODULE, DRV_NAME);
2598        if (IS_ERR(dev_class)) {
2599                rmcd_error("Unable to create " DRV_NAME " class");
2600                return PTR_ERR(dev_class);
2601        }
2602
2603        ret = alloc_chrdev_region(&dev_number, 0, RIO_MAX_MPORTS, DRV_NAME);
2604        if (ret < 0)
2605                goto err_chr;
2606
2607        rmcd_debug(INIT, "Registered class with major=%d", MAJOR(dev_number));
2608
2609        /* Register to rio_mport_interface */
2610        ret = class_interface_register(&rio_mport_interface);
2611        if (ret) {
2612                rmcd_error("class_interface_register() failed, err=%d", ret);
2613                goto err_cli;
2614        }
2615
2616        return 0;
2617
2618err_cli:
2619        unregister_chrdev_region(dev_number, RIO_MAX_MPORTS);
2620err_chr:
2621        class_destroy(dev_class);
2622        return ret;
2623}
2624
2625/**
2626 * mport_exit - Driver module unloading
2627 */
2628static void __exit mport_exit(void)
2629{
2630        class_interface_unregister(&rio_mport_interface);
2631        class_destroy(dev_class);
2632        unregister_chrdev_region(dev_number, RIO_MAX_MPORTS);
2633}
2634
2635module_init(mport_init);
2636module_exit(mport_exit);
2637