1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0-only
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * Copyright (C) 2015-2016 Red Hat
4*4882a593Smuzhiyun * Copyright (C) 2015 Lyude Paul <thatslyude@gmail.com>
5*4882a593Smuzhiyun */
6*4882a593Smuzhiyun
7*4882a593Smuzhiyun #include <linux/kernel.h>
8*4882a593Smuzhiyun #include <linux/slab.h>
9*4882a593Smuzhiyun #include <linux/serio.h>
10*4882a593Smuzhiyun #include <linux/notifier.h>
11*4882a593Smuzhiyun #include "rmi_driver.h"
12*4882a593Smuzhiyun
13*4882a593Smuzhiyun #define RMI_F03_RX_DATA_OFB 0x01
14*4882a593Smuzhiyun #define RMI_F03_OB_SIZE 2
15*4882a593Smuzhiyun
16*4882a593Smuzhiyun #define RMI_F03_OB_OFFSET 2
17*4882a593Smuzhiyun #define RMI_F03_OB_DATA_OFFSET 1
18*4882a593Smuzhiyun #define RMI_F03_OB_FLAG_TIMEOUT BIT(6)
19*4882a593Smuzhiyun #define RMI_F03_OB_FLAG_PARITY BIT(7)
20*4882a593Smuzhiyun
21*4882a593Smuzhiyun #define RMI_F03_DEVICE_COUNT 0x07
22*4882a593Smuzhiyun #define RMI_F03_BYTES_PER_DEVICE 0x07
23*4882a593Smuzhiyun #define RMI_F03_BYTES_PER_DEVICE_SHIFT 4
24*4882a593Smuzhiyun #define RMI_F03_QUEUE_LENGTH 0x0F
25*4882a593Smuzhiyun
26*4882a593Smuzhiyun #define PSMOUSE_OOB_EXTRA_BTNS 0x01
27*4882a593Smuzhiyun
28*4882a593Smuzhiyun struct f03_data {
29*4882a593Smuzhiyun struct rmi_function *fn;
30*4882a593Smuzhiyun
31*4882a593Smuzhiyun struct serio *serio;
32*4882a593Smuzhiyun bool serio_registered;
33*4882a593Smuzhiyun
34*4882a593Smuzhiyun unsigned int overwrite_buttons;
35*4882a593Smuzhiyun
36*4882a593Smuzhiyun u8 device_count;
37*4882a593Smuzhiyun u8 rx_queue_length;
38*4882a593Smuzhiyun };
39*4882a593Smuzhiyun
rmi_f03_overwrite_button(struct rmi_function * fn,unsigned int button,int value)40*4882a593Smuzhiyun int rmi_f03_overwrite_button(struct rmi_function *fn, unsigned int button,
41*4882a593Smuzhiyun int value)
42*4882a593Smuzhiyun {
43*4882a593Smuzhiyun struct f03_data *f03 = dev_get_drvdata(&fn->dev);
44*4882a593Smuzhiyun unsigned int bit;
45*4882a593Smuzhiyun
46*4882a593Smuzhiyun if (button < BTN_LEFT || button > BTN_MIDDLE)
47*4882a593Smuzhiyun return -EINVAL;
48*4882a593Smuzhiyun
49*4882a593Smuzhiyun bit = BIT(button - BTN_LEFT);
50*4882a593Smuzhiyun
51*4882a593Smuzhiyun if (value)
52*4882a593Smuzhiyun f03->overwrite_buttons |= bit;
53*4882a593Smuzhiyun else
54*4882a593Smuzhiyun f03->overwrite_buttons &= ~bit;
55*4882a593Smuzhiyun
56*4882a593Smuzhiyun return 0;
57*4882a593Smuzhiyun }
58*4882a593Smuzhiyun
rmi_f03_commit_buttons(struct rmi_function * fn)59*4882a593Smuzhiyun void rmi_f03_commit_buttons(struct rmi_function *fn)
60*4882a593Smuzhiyun {
61*4882a593Smuzhiyun struct f03_data *f03 = dev_get_drvdata(&fn->dev);
62*4882a593Smuzhiyun struct serio *serio = f03->serio;
63*4882a593Smuzhiyun
64*4882a593Smuzhiyun serio_pause_rx(serio);
65*4882a593Smuzhiyun if (serio->drv) {
66*4882a593Smuzhiyun serio->drv->interrupt(serio, PSMOUSE_OOB_EXTRA_BTNS,
67*4882a593Smuzhiyun SERIO_OOB_DATA);
68*4882a593Smuzhiyun serio->drv->interrupt(serio, f03->overwrite_buttons,
69*4882a593Smuzhiyun SERIO_OOB_DATA);
70*4882a593Smuzhiyun }
71*4882a593Smuzhiyun serio_continue_rx(serio);
72*4882a593Smuzhiyun }
73*4882a593Smuzhiyun
rmi_f03_pt_write(struct serio * id,unsigned char val)74*4882a593Smuzhiyun static int rmi_f03_pt_write(struct serio *id, unsigned char val)
75*4882a593Smuzhiyun {
76*4882a593Smuzhiyun struct f03_data *f03 = id->port_data;
77*4882a593Smuzhiyun int error;
78*4882a593Smuzhiyun
79*4882a593Smuzhiyun rmi_dbg(RMI_DEBUG_FN, &f03->fn->dev,
80*4882a593Smuzhiyun "%s: Wrote %.2hhx to PS/2 passthrough address",
81*4882a593Smuzhiyun __func__, val);
82*4882a593Smuzhiyun
83*4882a593Smuzhiyun error = rmi_write(f03->fn->rmi_dev, f03->fn->fd.data_base_addr, val);
84*4882a593Smuzhiyun if (error) {
85*4882a593Smuzhiyun dev_err(&f03->fn->dev,
86*4882a593Smuzhiyun "%s: Failed to write to F03 TX register (%d).\n",
87*4882a593Smuzhiyun __func__, error);
88*4882a593Smuzhiyun return error;
89*4882a593Smuzhiyun }
90*4882a593Smuzhiyun
91*4882a593Smuzhiyun return 0;
92*4882a593Smuzhiyun }
93*4882a593Smuzhiyun
rmi_f03_initialize(struct f03_data * f03)94*4882a593Smuzhiyun static int rmi_f03_initialize(struct f03_data *f03)
95*4882a593Smuzhiyun {
96*4882a593Smuzhiyun struct rmi_function *fn = f03->fn;
97*4882a593Smuzhiyun struct device *dev = &fn->dev;
98*4882a593Smuzhiyun int error;
99*4882a593Smuzhiyun u8 bytes_per_device;
100*4882a593Smuzhiyun u8 query1;
101*4882a593Smuzhiyun u8 query2[RMI_F03_DEVICE_COUNT * RMI_F03_BYTES_PER_DEVICE];
102*4882a593Smuzhiyun size_t query2_len;
103*4882a593Smuzhiyun
104*4882a593Smuzhiyun error = rmi_read(fn->rmi_dev, fn->fd.query_base_addr, &query1);
105*4882a593Smuzhiyun if (error) {
106*4882a593Smuzhiyun dev_err(dev, "Failed to read query register (%d).\n", error);
107*4882a593Smuzhiyun return error;
108*4882a593Smuzhiyun }
109*4882a593Smuzhiyun
110*4882a593Smuzhiyun f03->device_count = query1 & RMI_F03_DEVICE_COUNT;
111*4882a593Smuzhiyun bytes_per_device = (query1 >> RMI_F03_BYTES_PER_DEVICE_SHIFT) &
112*4882a593Smuzhiyun RMI_F03_BYTES_PER_DEVICE;
113*4882a593Smuzhiyun
114*4882a593Smuzhiyun query2_len = f03->device_count * bytes_per_device;
115*4882a593Smuzhiyun
116*4882a593Smuzhiyun /*
117*4882a593Smuzhiyun * The first generation of image sensors don't have a second part to
118*4882a593Smuzhiyun * their f03 query, as such we have to set some of these values manually
119*4882a593Smuzhiyun */
120*4882a593Smuzhiyun if (query2_len < 1) {
121*4882a593Smuzhiyun f03->device_count = 1;
122*4882a593Smuzhiyun f03->rx_queue_length = 7;
123*4882a593Smuzhiyun } else {
124*4882a593Smuzhiyun error = rmi_read_block(fn->rmi_dev, fn->fd.query_base_addr + 1,
125*4882a593Smuzhiyun query2, query2_len);
126*4882a593Smuzhiyun if (error) {
127*4882a593Smuzhiyun dev_err(dev,
128*4882a593Smuzhiyun "Failed to read second set of query registers (%d).\n",
129*4882a593Smuzhiyun error);
130*4882a593Smuzhiyun return error;
131*4882a593Smuzhiyun }
132*4882a593Smuzhiyun
133*4882a593Smuzhiyun f03->rx_queue_length = query2[0] & RMI_F03_QUEUE_LENGTH;
134*4882a593Smuzhiyun }
135*4882a593Smuzhiyun
136*4882a593Smuzhiyun return 0;
137*4882a593Smuzhiyun }
138*4882a593Smuzhiyun
rmi_f03_pt_open(struct serio * serio)139*4882a593Smuzhiyun static int rmi_f03_pt_open(struct serio *serio)
140*4882a593Smuzhiyun {
141*4882a593Smuzhiyun struct f03_data *f03 = serio->port_data;
142*4882a593Smuzhiyun struct rmi_function *fn = f03->fn;
143*4882a593Smuzhiyun const u8 ob_len = f03->rx_queue_length * RMI_F03_OB_SIZE;
144*4882a593Smuzhiyun const u16 data_addr = fn->fd.data_base_addr + RMI_F03_OB_OFFSET;
145*4882a593Smuzhiyun u8 obs[RMI_F03_QUEUE_LENGTH * RMI_F03_OB_SIZE];
146*4882a593Smuzhiyun int error;
147*4882a593Smuzhiyun
148*4882a593Smuzhiyun /*
149*4882a593Smuzhiyun * Consume any pending data. Some devices like to spam with
150*4882a593Smuzhiyun * 0xaa 0x00 announcements which may confuse us as we try to
151*4882a593Smuzhiyun * probe the device.
152*4882a593Smuzhiyun */
153*4882a593Smuzhiyun error = rmi_read_block(fn->rmi_dev, data_addr, &obs, ob_len);
154*4882a593Smuzhiyun if (!error)
155*4882a593Smuzhiyun rmi_dbg(RMI_DEBUG_FN, &fn->dev,
156*4882a593Smuzhiyun "%s: Consumed %*ph (%d) from PS2 guest\n",
157*4882a593Smuzhiyun __func__, ob_len, obs, ob_len);
158*4882a593Smuzhiyun
159*4882a593Smuzhiyun return fn->rmi_dev->driver->set_irq_bits(fn->rmi_dev, fn->irq_mask);
160*4882a593Smuzhiyun }
161*4882a593Smuzhiyun
rmi_f03_pt_close(struct serio * serio)162*4882a593Smuzhiyun static void rmi_f03_pt_close(struct serio *serio)
163*4882a593Smuzhiyun {
164*4882a593Smuzhiyun struct f03_data *f03 = serio->port_data;
165*4882a593Smuzhiyun struct rmi_function *fn = f03->fn;
166*4882a593Smuzhiyun
167*4882a593Smuzhiyun fn->rmi_dev->driver->clear_irq_bits(fn->rmi_dev, fn->irq_mask);
168*4882a593Smuzhiyun }
169*4882a593Smuzhiyun
rmi_f03_register_pt(struct f03_data * f03)170*4882a593Smuzhiyun static int rmi_f03_register_pt(struct f03_data *f03)
171*4882a593Smuzhiyun {
172*4882a593Smuzhiyun struct serio *serio;
173*4882a593Smuzhiyun
174*4882a593Smuzhiyun serio = kzalloc(sizeof(struct serio), GFP_KERNEL);
175*4882a593Smuzhiyun if (!serio)
176*4882a593Smuzhiyun return -ENOMEM;
177*4882a593Smuzhiyun
178*4882a593Smuzhiyun serio->id.type = SERIO_PS_PSTHRU;
179*4882a593Smuzhiyun serio->write = rmi_f03_pt_write;
180*4882a593Smuzhiyun serio->open = rmi_f03_pt_open;
181*4882a593Smuzhiyun serio->close = rmi_f03_pt_close;
182*4882a593Smuzhiyun serio->port_data = f03;
183*4882a593Smuzhiyun
184*4882a593Smuzhiyun strlcpy(serio->name, "RMI4 PS/2 pass-through", sizeof(serio->name));
185*4882a593Smuzhiyun snprintf(serio->phys, sizeof(serio->phys), "%s/serio0",
186*4882a593Smuzhiyun dev_name(&f03->fn->dev));
187*4882a593Smuzhiyun serio->dev.parent = &f03->fn->dev;
188*4882a593Smuzhiyun
189*4882a593Smuzhiyun f03->serio = serio;
190*4882a593Smuzhiyun
191*4882a593Smuzhiyun printk(KERN_INFO "serio: %s port at %s\n",
192*4882a593Smuzhiyun serio->name, dev_name(&f03->fn->dev));
193*4882a593Smuzhiyun serio_register_port(serio);
194*4882a593Smuzhiyun
195*4882a593Smuzhiyun return 0;
196*4882a593Smuzhiyun }
197*4882a593Smuzhiyun
rmi_f03_probe(struct rmi_function * fn)198*4882a593Smuzhiyun static int rmi_f03_probe(struct rmi_function *fn)
199*4882a593Smuzhiyun {
200*4882a593Smuzhiyun struct device *dev = &fn->dev;
201*4882a593Smuzhiyun struct f03_data *f03;
202*4882a593Smuzhiyun int error;
203*4882a593Smuzhiyun
204*4882a593Smuzhiyun f03 = devm_kzalloc(dev, sizeof(struct f03_data), GFP_KERNEL);
205*4882a593Smuzhiyun if (!f03)
206*4882a593Smuzhiyun return -ENOMEM;
207*4882a593Smuzhiyun
208*4882a593Smuzhiyun f03->fn = fn;
209*4882a593Smuzhiyun
210*4882a593Smuzhiyun error = rmi_f03_initialize(f03);
211*4882a593Smuzhiyun if (error < 0)
212*4882a593Smuzhiyun return error;
213*4882a593Smuzhiyun
214*4882a593Smuzhiyun if (f03->device_count != 1)
215*4882a593Smuzhiyun dev_warn(dev, "found %d devices on PS/2 passthrough",
216*4882a593Smuzhiyun f03->device_count);
217*4882a593Smuzhiyun
218*4882a593Smuzhiyun dev_set_drvdata(dev, f03);
219*4882a593Smuzhiyun return 0;
220*4882a593Smuzhiyun }
221*4882a593Smuzhiyun
rmi_f03_config(struct rmi_function * fn)222*4882a593Smuzhiyun static int rmi_f03_config(struct rmi_function *fn)
223*4882a593Smuzhiyun {
224*4882a593Smuzhiyun struct f03_data *f03 = dev_get_drvdata(&fn->dev);
225*4882a593Smuzhiyun int error;
226*4882a593Smuzhiyun
227*4882a593Smuzhiyun if (!f03->serio_registered) {
228*4882a593Smuzhiyun error = rmi_f03_register_pt(f03);
229*4882a593Smuzhiyun if (error)
230*4882a593Smuzhiyun return error;
231*4882a593Smuzhiyun
232*4882a593Smuzhiyun f03->serio_registered = true;
233*4882a593Smuzhiyun } else {
234*4882a593Smuzhiyun /*
235*4882a593Smuzhiyun * We must be re-configuring the sensor, just enable
236*4882a593Smuzhiyun * interrupts for this function.
237*4882a593Smuzhiyun */
238*4882a593Smuzhiyun fn->rmi_dev->driver->set_irq_bits(fn->rmi_dev, fn->irq_mask);
239*4882a593Smuzhiyun }
240*4882a593Smuzhiyun
241*4882a593Smuzhiyun return 0;
242*4882a593Smuzhiyun }
243*4882a593Smuzhiyun
rmi_f03_attention(int irq,void * ctx)244*4882a593Smuzhiyun static irqreturn_t rmi_f03_attention(int irq, void *ctx)
245*4882a593Smuzhiyun {
246*4882a593Smuzhiyun struct rmi_function *fn = ctx;
247*4882a593Smuzhiyun struct rmi_device *rmi_dev = fn->rmi_dev;
248*4882a593Smuzhiyun struct rmi_driver_data *drvdata = dev_get_drvdata(&rmi_dev->dev);
249*4882a593Smuzhiyun struct f03_data *f03 = dev_get_drvdata(&fn->dev);
250*4882a593Smuzhiyun const u16 data_addr = fn->fd.data_base_addr + RMI_F03_OB_OFFSET;
251*4882a593Smuzhiyun const u8 ob_len = f03->rx_queue_length * RMI_F03_OB_SIZE;
252*4882a593Smuzhiyun u8 obs[RMI_F03_QUEUE_LENGTH * RMI_F03_OB_SIZE];
253*4882a593Smuzhiyun u8 ob_status;
254*4882a593Smuzhiyun u8 ob_data;
255*4882a593Smuzhiyun unsigned int serio_flags;
256*4882a593Smuzhiyun int i;
257*4882a593Smuzhiyun int error;
258*4882a593Smuzhiyun
259*4882a593Smuzhiyun if (drvdata->attn_data.data) {
260*4882a593Smuzhiyun /* First grab the data passed by the transport device */
261*4882a593Smuzhiyun if (drvdata->attn_data.size < ob_len) {
262*4882a593Smuzhiyun dev_warn(&fn->dev, "F03 interrupted, but data is missing!\n");
263*4882a593Smuzhiyun return IRQ_HANDLED;
264*4882a593Smuzhiyun }
265*4882a593Smuzhiyun
266*4882a593Smuzhiyun memcpy(obs, drvdata->attn_data.data, ob_len);
267*4882a593Smuzhiyun
268*4882a593Smuzhiyun drvdata->attn_data.data += ob_len;
269*4882a593Smuzhiyun drvdata->attn_data.size -= ob_len;
270*4882a593Smuzhiyun } else {
271*4882a593Smuzhiyun /* Grab all of the data registers, and check them for data */
272*4882a593Smuzhiyun error = rmi_read_block(fn->rmi_dev, data_addr, &obs, ob_len);
273*4882a593Smuzhiyun if (error) {
274*4882a593Smuzhiyun dev_err(&fn->dev,
275*4882a593Smuzhiyun "%s: Failed to read F03 output buffers: %d\n",
276*4882a593Smuzhiyun __func__, error);
277*4882a593Smuzhiyun serio_interrupt(f03->serio, 0, SERIO_TIMEOUT);
278*4882a593Smuzhiyun return IRQ_RETVAL(error);
279*4882a593Smuzhiyun }
280*4882a593Smuzhiyun }
281*4882a593Smuzhiyun
282*4882a593Smuzhiyun for (i = 0; i < ob_len; i += RMI_F03_OB_SIZE) {
283*4882a593Smuzhiyun ob_status = obs[i];
284*4882a593Smuzhiyun ob_data = obs[i + RMI_F03_OB_DATA_OFFSET];
285*4882a593Smuzhiyun serio_flags = 0;
286*4882a593Smuzhiyun
287*4882a593Smuzhiyun if (!(ob_status & RMI_F03_RX_DATA_OFB))
288*4882a593Smuzhiyun continue;
289*4882a593Smuzhiyun
290*4882a593Smuzhiyun if (ob_status & RMI_F03_OB_FLAG_TIMEOUT)
291*4882a593Smuzhiyun serio_flags |= SERIO_TIMEOUT;
292*4882a593Smuzhiyun if (ob_status & RMI_F03_OB_FLAG_PARITY)
293*4882a593Smuzhiyun serio_flags |= SERIO_PARITY;
294*4882a593Smuzhiyun
295*4882a593Smuzhiyun rmi_dbg(RMI_DEBUG_FN, &fn->dev,
296*4882a593Smuzhiyun "%s: Received %.2hhx from PS2 guest T: %c P: %c\n",
297*4882a593Smuzhiyun __func__, ob_data,
298*4882a593Smuzhiyun serio_flags & SERIO_TIMEOUT ? 'Y' : 'N',
299*4882a593Smuzhiyun serio_flags & SERIO_PARITY ? 'Y' : 'N');
300*4882a593Smuzhiyun
301*4882a593Smuzhiyun serio_interrupt(f03->serio, ob_data, serio_flags);
302*4882a593Smuzhiyun }
303*4882a593Smuzhiyun
304*4882a593Smuzhiyun return IRQ_HANDLED;
305*4882a593Smuzhiyun }
306*4882a593Smuzhiyun
rmi_f03_remove(struct rmi_function * fn)307*4882a593Smuzhiyun static void rmi_f03_remove(struct rmi_function *fn)
308*4882a593Smuzhiyun {
309*4882a593Smuzhiyun struct f03_data *f03 = dev_get_drvdata(&fn->dev);
310*4882a593Smuzhiyun
311*4882a593Smuzhiyun if (f03->serio_registered)
312*4882a593Smuzhiyun serio_unregister_port(f03->serio);
313*4882a593Smuzhiyun }
314*4882a593Smuzhiyun
315*4882a593Smuzhiyun struct rmi_function_handler rmi_f03_handler = {
316*4882a593Smuzhiyun .driver = {
317*4882a593Smuzhiyun .name = "rmi4_f03",
318*4882a593Smuzhiyun },
319*4882a593Smuzhiyun .func = 0x03,
320*4882a593Smuzhiyun .probe = rmi_f03_probe,
321*4882a593Smuzhiyun .config = rmi_f03_config,
322*4882a593Smuzhiyun .attention = rmi_f03_attention,
323*4882a593Smuzhiyun .remove = rmi_f03_remove,
324*4882a593Smuzhiyun };
325*4882a593Smuzhiyun
326*4882a593Smuzhiyun MODULE_AUTHOR("Lyude Paul <thatslyude@gmail.com>");
327*4882a593Smuzhiyun MODULE_DESCRIPTION("RMI F03 module");
328*4882a593Smuzhiyun MODULE_LICENSE("GPL");
329