Zhu Yi | bb9f869 | 2009-05-21 21:20:45 +0800 | [diff] [blame] | 1 | /* |
| 2 | * Intel Wireless Multicomm 3200 WiFi driver |
| 3 | * |
| 4 | * Copyright (C) 2009 Intel Corporation. All rights reserved. |
| 5 | * |
| 6 | * Redistribution and use in source and binary forms, with or without |
| 7 | * modification, are permitted provided that the following conditions |
| 8 | * are met: |
| 9 | * |
| 10 | * * Redistributions of source code must retain the above copyright |
| 11 | * notice, this list of conditions and the following disclaimer. |
| 12 | * * Redistributions in binary form must reproduce the above copyright |
| 13 | * notice, this list of conditions and the following disclaimer in |
| 14 | * the documentation and/or other materials provided with the |
| 15 | * distribution. |
| 16 | * * Neither the name of Intel Corporation nor the names of its |
| 17 | * contributors may be used to endorse or promote products derived |
| 18 | * from this software without specific prior written permission. |
| 19 | * |
| 20 | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS |
| 21 | * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT |
| 22 | * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR |
| 23 | * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT |
| 24 | * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
| 25 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
| 26 | * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| 27 | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| 28 | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| 29 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
| 30 | * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| 31 | * |
| 32 | * |
| 33 | * Intel Corporation <ilw@linux.intel.com> |
| 34 | * Samuel Ortiz <samuel.ortiz@intel.com> |
| 35 | * Zhu Yi <yi.zhu@intel.com> |
| 36 | * |
| 37 | */ |
| 38 | |
| 39 | #include <linux/kernel.h> |
| 40 | #include <linux/firmware.h> |
| 41 | |
| 42 | #include "iwm.h" |
| 43 | #include "bus.h" |
| 44 | #include "hal.h" |
| 45 | #include "umac.h" |
| 46 | #include "debug.h" |
| 47 | #include "fw.h" |
| 48 | #include "commands.h" |
| 49 | |
| 50 | static const char fw_barker[] = "*WESTOPFORNOONE*"; |
| 51 | |
| 52 | /* |
| 53 | * @op_code: Op code we're looking for. |
| 54 | * @index: There can be several instances of the same opcode within |
| 55 | * the firmware. Index specifies which one we're looking for. |
| 56 | */ |
| 57 | static int iwm_fw_op_offset(struct iwm_priv *iwm, const struct firmware *fw, |
| 58 | u16 op_code, u32 index) |
| 59 | { |
| 60 | int offset = -EINVAL, fw_offset; |
| 61 | u32 op_index = 0; |
| 62 | const u8 *fw_ptr; |
| 63 | struct iwm_fw_hdr_rec *rec; |
| 64 | |
| 65 | fw_offset = 0; |
| 66 | fw_ptr = fw->data; |
| 67 | |
| 68 | /* We first need to look for the firmware barker */ |
| 69 | if (memcmp(fw_ptr, fw_barker, IWM_HDR_BARKER_LEN)) { |
| 70 | IWM_ERR(iwm, "No barker string in this FW\n"); |
| 71 | return -EINVAL; |
| 72 | } |
| 73 | |
| 74 | if (fw->size < IWM_HDR_LEN) { |
Randy Dunlap | 1bb5633 | 2009-05-26 12:17:52 -0700 | [diff] [blame] | 75 | IWM_ERR(iwm, "FW is too small (%zu)\n", fw->size); |
Zhu Yi | bb9f869 | 2009-05-21 21:20:45 +0800 | [diff] [blame] | 76 | return -EINVAL; |
| 77 | } |
| 78 | |
| 79 | fw_offset += IWM_HDR_BARKER_LEN; |
| 80 | |
| 81 | while (fw_offset < fw->size) { |
| 82 | rec = (struct iwm_fw_hdr_rec *)(fw_ptr + fw_offset); |
| 83 | |
| 84 | IWM_DBG_FW(iwm, DBG, "FW: op_code: 0x%x, len: %d @ 0x%x\n", |
| 85 | rec->op_code, rec->len, fw_offset); |
| 86 | |
| 87 | if (rec->op_code == IWM_HDR_REC_OP_INVALID) { |
| 88 | IWM_DBG_FW(iwm, DBG, "Reached INVALID op code\n"); |
| 89 | break; |
| 90 | } |
| 91 | |
| 92 | if (rec->op_code == op_code) { |
| 93 | if (op_index == index) { |
| 94 | fw_offset += sizeof(struct iwm_fw_hdr_rec); |
| 95 | offset = fw_offset; |
| 96 | goto out; |
| 97 | } |
| 98 | op_index++; |
| 99 | } |
| 100 | |
| 101 | fw_offset += sizeof(struct iwm_fw_hdr_rec) + rec->len; |
| 102 | } |
| 103 | |
| 104 | out: |
| 105 | return offset; |
| 106 | } |
| 107 | |
| 108 | static int iwm_load_firmware_chunk(struct iwm_priv *iwm, |
| 109 | const struct firmware *fw, |
| 110 | struct iwm_fw_img_desc *img_desc) |
| 111 | { |
| 112 | struct iwm_udma_nonwifi_cmd target_cmd; |
| 113 | u32 chunk_size; |
| 114 | const u8 *chunk_ptr; |
| 115 | int ret = 0; |
| 116 | |
| 117 | IWM_DBG_FW(iwm, INFO, "Loading FW chunk: %d bytes @ 0x%x\n", |
| 118 | img_desc->length, img_desc->address); |
| 119 | |
| 120 | target_cmd.opcode = UMAC_HDI_OUT_OPCODE_WRITE; |
| 121 | target_cmd.handle_by_hw = 1; |
| 122 | target_cmd.op2 = 0; |
| 123 | target_cmd.resp = 0; |
| 124 | target_cmd.eop = 1; |
| 125 | |
| 126 | chunk_size = img_desc->length; |
| 127 | chunk_ptr = fw->data + img_desc->offset; |
| 128 | |
| 129 | while (chunk_size > 0) { |
| 130 | u32 tmp_chunk_size; |
| 131 | |
| 132 | tmp_chunk_size = min_t(u32, chunk_size, |
| 133 | IWM_MAX_NONWIFI_CMD_BUFF_SIZE); |
| 134 | |
| 135 | target_cmd.addr = cpu_to_le32(img_desc->address + |
| 136 | (chunk_ptr - fw->data - img_desc->offset)); |
| 137 | target_cmd.op1_sz = cpu_to_le32(tmp_chunk_size); |
| 138 | |
| 139 | IWM_DBG_FW(iwm, DBG, "\t%d bytes @ 0x%x\n", |
| 140 | tmp_chunk_size, target_cmd.addr); |
| 141 | |
| 142 | ret = iwm_hal_send_target_cmd(iwm, &target_cmd, chunk_ptr); |
| 143 | if (ret < 0) { |
| 144 | IWM_ERR(iwm, "Couldn't load FW chunk\n"); |
| 145 | break; |
| 146 | } |
| 147 | |
| 148 | chunk_size -= tmp_chunk_size; |
| 149 | chunk_ptr += tmp_chunk_size; |
| 150 | } |
| 151 | |
| 152 | return ret; |
| 153 | } |
| 154 | /* |
| 155 | * To load a fw image to the target, we basically go through the |
| 156 | * fw, looking for OP_MEM_DESC records. Once we found one, we |
| 157 | * pass it to iwm_load_firmware_chunk(). |
| 158 | * The OP_MEM_DESC records contain the actuall memory chunk to be |
| 159 | * sent, but also the destination address. |
| 160 | */ |
| 161 | static int iwm_load_img(struct iwm_priv *iwm, const char *img_name) |
| 162 | { |
| 163 | const struct firmware *fw; |
| 164 | struct iwm_fw_img_desc *img_desc; |
| 165 | struct iwm_fw_img_ver *ver; |
| 166 | int ret = 0, fw_offset; |
| 167 | u32 opcode_idx = 0, build_date; |
| 168 | char *build_tag; |
| 169 | |
| 170 | ret = request_firmware(&fw, img_name, iwm_to_dev(iwm)); |
| 171 | if (ret) { |
| 172 | IWM_ERR(iwm, "Request firmware failed"); |
| 173 | return ret; |
| 174 | } |
| 175 | |
| 176 | IWM_DBG_FW(iwm, INFO, "Start to load FW %s\n", img_name); |
| 177 | |
| 178 | while (1) { |
| 179 | fw_offset = iwm_fw_op_offset(iwm, fw, |
| 180 | IWM_HDR_REC_OP_MEM_DESC, |
| 181 | opcode_idx); |
| 182 | if (fw_offset < 0) |
| 183 | break; |
| 184 | |
| 185 | img_desc = (struct iwm_fw_img_desc *)(fw->data + fw_offset); |
| 186 | ret = iwm_load_firmware_chunk(iwm, fw, img_desc); |
| 187 | if (ret < 0) |
| 188 | goto err_release_fw; |
| 189 | opcode_idx++; |
| 190 | }; |
| 191 | |
| 192 | /* Read firmware version */ |
| 193 | fw_offset = iwm_fw_op_offset(iwm, fw, IWM_HDR_REC_OP_SW_VER, 0); |
| 194 | if (fw_offset < 0) |
| 195 | goto err_release_fw; |
| 196 | |
| 197 | ver = (struct iwm_fw_img_ver *)(fw->data + fw_offset); |
| 198 | |
| 199 | /* Read build tag */ |
| 200 | fw_offset = iwm_fw_op_offset(iwm, fw, IWM_HDR_REC_OP_BUILD_TAG, 0); |
| 201 | if (fw_offset < 0) |
| 202 | goto err_release_fw; |
| 203 | |
| 204 | build_tag = (char *)(fw->data + fw_offset); |
| 205 | |
| 206 | /* Read build date */ |
| 207 | fw_offset = iwm_fw_op_offset(iwm, fw, IWM_HDR_REC_OP_BUILD_DATE, 0); |
| 208 | if (fw_offset < 0) |
| 209 | goto err_release_fw; |
| 210 | |
| 211 | build_date = *(u32 *)(fw->data + fw_offset); |
| 212 | |
| 213 | IWM_INFO(iwm, "%s:\n", img_name); |
| 214 | IWM_INFO(iwm, "\tVersion: %02X.%02X\n", ver->major, ver->minor); |
| 215 | IWM_INFO(iwm, "\tBuild tag: %s\n", build_tag); |
| 216 | IWM_INFO(iwm, "\tBuild date: %x-%x-%x\n", |
| 217 | IWM_BUILD_YEAR(build_date), IWM_BUILD_MONTH(build_date), |
| 218 | IWM_BUILD_DAY(build_date)); |
| 219 | |
Samuel Ortiz | 5dc5316 | 2009-10-16 13:18:59 +0800 | [diff] [blame] | 220 | if (!strcmp(img_name, iwm->bus_ops->umac_name)) |
| 221 | sprintf(iwm->umac_version, "%02X.%02X", |
| 222 | ver->major, ver->minor); |
| 223 | |
| 224 | if (!strcmp(img_name, iwm->bus_ops->lmac_name)) |
| 225 | sprintf(iwm->lmac_version, "%02X.%02X", |
| 226 | ver->major, ver->minor); |
Zhu Yi | bb9f869 | 2009-05-21 21:20:45 +0800 | [diff] [blame] | 227 | |
| 228 | err_release_fw: |
| 229 | release_firmware(fw); |
| 230 | |
| 231 | return ret; |
| 232 | } |
| 233 | |
| 234 | static int iwm_load_umac(struct iwm_priv *iwm) |
| 235 | { |
| 236 | struct iwm_udma_nonwifi_cmd target_cmd; |
| 237 | int ret; |
| 238 | |
| 239 | ret = iwm_load_img(iwm, iwm->bus_ops->umac_name); |
| 240 | if (ret < 0) |
| 241 | return ret; |
| 242 | |
| 243 | /* We've loaded the UMAC, we can tell the target to jump there */ |
| 244 | target_cmd.opcode = UMAC_HDI_OUT_OPCODE_JUMP; |
| 245 | target_cmd.addr = cpu_to_le32(UMAC_MU_FW_INST_DATA_12_ADDR); |
| 246 | target_cmd.op1_sz = 0; |
| 247 | target_cmd.op2 = 0; |
| 248 | target_cmd.handle_by_hw = 0; |
| 249 | target_cmd.resp = 1 ; |
| 250 | target_cmd.eop = 1; |
| 251 | |
| 252 | ret = iwm_hal_send_target_cmd(iwm, &target_cmd, NULL); |
| 253 | if (ret < 0) |
| 254 | IWM_ERR(iwm, "Couldn't send JMP command\n"); |
| 255 | |
| 256 | return ret; |
| 257 | } |
| 258 | |
| 259 | static int iwm_load_lmac(struct iwm_priv *iwm, const char *img_name) |
| 260 | { |
| 261 | int ret; |
| 262 | |
| 263 | ret = iwm_load_img(iwm, img_name); |
| 264 | if (ret < 0) |
| 265 | return ret; |
| 266 | |
| 267 | return iwm_send_umac_reset(iwm, |
| 268 | cpu_to_le32(UMAC_RST_CTRL_FLG_LARC_CLK_EN), 0); |
| 269 | } |
| 270 | |
Samuel Ortiz | d04bd62 | 2009-09-01 15:14:04 +0200 | [diff] [blame] | 271 | static int iwm_init_calib(struct iwm_priv *iwm, unsigned long cfg_bitmap, |
| 272 | unsigned long expected_bitmap, u8 rx_iq_cmd) |
| 273 | { |
| 274 | /* Read RX IQ calibration result from EEPROM */ |
| 275 | if (test_bit(rx_iq_cmd, &cfg_bitmap)) { |
| 276 | iwm_store_rxiq_calib_result(iwm); |
| 277 | set_bit(PHY_CALIBRATE_RX_IQ_CMD, &iwm->calib_done_map); |
| 278 | } |
| 279 | |
| 280 | iwm_send_prio_table(iwm); |
| 281 | iwm_send_init_calib_cfg(iwm, cfg_bitmap); |
| 282 | |
| 283 | while (iwm->calib_done_map != expected_bitmap) { |
| 284 | if (iwm_notif_handle(iwm, CALIBRATION_RES_NOTIFICATION, |
| 285 | IWM_SRC_LMAC, WAIT_NOTIF_TIMEOUT)) { |
| 286 | IWM_DBG_FW(iwm, DBG, "Initial calibration timeout\n"); |
| 287 | return -ETIMEDOUT; |
| 288 | } |
| 289 | |
| 290 | IWM_DBG_FW(iwm, DBG, "Got calibration result. calib_done_map: " |
| 291 | "0x%lx, expected calibrations: 0x%lx\n", |
| 292 | iwm->calib_done_map, expected_bitmap); |
| 293 | } |
| 294 | |
| 295 | return 0; |
| 296 | } |
| 297 | |
Zhu Yi | bb9f869 | 2009-05-21 21:20:45 +0800 | [diff] [blame] | 298 | /* |
| 299 | * We currently have to load 3 FWs: |
| 300 | * 1) The UMAC (Upper MAC). |
| 301 | * 2) The calibration LMAC (Lower MAC). |
| 302 | * We then send the calibration init command, so that the device can |
| 303 | * run a first calibration round. |
| 304 | * 3) The operational LMAC, which replaces the calibration one when it's |
| 305 | * done with the first calibration round. |
| 306 | * |
| 307 | * Once those 3 FWs have been loaded, we send the periodic calibration |
| 308 | * command, and then the device is available for regular 802.11 operations. |
| 309 | */ |
| 310 | int iwm_load_fw(struct iwm_priv *iwm) |
| 311 | { |
Zhu Yi | fd2c7fe | 2009-06-25 18:28:31 +0800 | [diff] [blame] | 312 | unsigned long init_calib_map, periodic_calib_map; |
Samuel Ortiz | d04bd62 | 2009-09-01 15:14:04 +0200 | [diff] [blame] | 313 | unsigned long expected_calib_map; |
Zhu Yi | bb9f869 | 2009-05-21 21:20:45 +0800 | [diff] [blame] | 314 | int ret; |
| 315 | |
| 316 | /* We first start downloading the UMAC */ |
| 317 | ret = iwm_load_umac(iwm); |
| 318 | if (ret < 0) { |
| 319 | IWM_ERR(iwm, "UMAC loading failed\n"); |
| 320 | return ret; |
| 321 | } |
| 322 | |
| 323 | /* Handle UMAC_ALIVE notification */ |
| 324 | ret = iwm_notif_handle(iwm, UMAC_NOTIFY_OPCODE_ALIVE, IWM_SRC_UMAC, |
| 325 | WAIT_NOTIF_TIMEOUT); |
| 326 | if (ret) { |
| 327 | IWM_ERR(iwm, "Handle UMAC_ALIVE failed: %d\n", ret); |
| 328 | return ret; |
| 329 | } |
| 330 | |
| 331 | /* UMAC is alive, we can download the calibration LMAC */ |
| 332 | ret = iwm_load_lmac(iwm, iwm->bus_ops->calib_lmac_name); |
| 333 | if (ret) { |
| 334 | IWM_ERR(iwm, "Calibration LMAC loading failed\n"); |
| 335 | return ret; |
| 336 | } |
| 337 | |
| 338 | /* Handle UMAC_INIT_COMPLETE notification */ |
| 339 | ret = iwm_notif_handle(iwm, UMAC_NOTIFY_OPCODE_INIT_COMPLETE, |
| 340 | IWM_SRC_UMAC, WAIT_NOTIF_TIMEOUT); |
| 341 | if (ret) { |
| 342 | IWM_ERR(iwm, "Handle INIT_COMPLETE failed for calibration " |
| 343 | "LMAC: %d\n", ret); |
| 344 | return ret; |
| 345 | } |
| 346 | |
| 347 | /* Read EEPROM data */ |
| 348 | ret = iwm_eeprom_init(iwm); |
| 349 | if (ret < 0) { |
| 350 | IWM_ERR(iwm, "Couldn't init eeprom array\n"); |
| 351 | return ret; |
| 352 | } |
| 353 | |
Zhu Yi | fd2c7fe | 2009-06-25 18:28:31 +0800 | [diff] [blame] | 354 | init_calib_map = iwm->conf.calib_map & IWM_CALIB_MAP_INIT_MSK; |
Samuel Ortiz | d04bd62 | 2009-09-01 15:14:04 +0200 | [diff] [blame] | 355 | expected_calib_map = iwm->conf.expected_calib_map & |
| 356 | IWM_CALIB_MAP_INIT_MSK; |
Zhu Yi | fd2c7fe | 2009-06-25 18:28:31 +0800 | [diff] [blame] | 357 | periodic_calib_map = IWM_CALIB_MAP_PER_LMAC(iwm->conf.calib_map); |
| 358 | |
Samuel Ortiz | d04bd62 | 2009-09-01 15:14:04 +0200 | [diff] [blame] | 359 | ret = iwm_init_calib(iwm, init_calib_map, expected_calib_map, |
| 360 | CALIB_CFG_RX_IQ_IDX); |
| 361 | if (ret < 0) { |
| 362 | /* Let's try the old way */ |
| 363 | ret = iwm_init_calib(iwm, expected_calib_map, |
| 364 | expected_calib_map, |
| 365 | PHY_CALIBRATE_RX_IQ_CMD); |
| 366 | if (ret < 0) { |
| 367 | IWM_ERR(iwm, "Calibration result timeout\n"); |
Zhu Yi | bb9f869 | 2009-05-21 21:20:45 +0800 | [diff] [blame] | 368 | goto out; |
| 369 | } |
Zhu Yi | bb9f869 | 2009-05-21 21:20:45 +0800 | [diff] [blame] | 370 | } |
| 371 | |
| 372 | /* Handle LMAC CALIBRATION_COMPLETE notification */ |
| 373 | ret = iwm_notif_handle(iwm, CALIBRATION_COMPLETE_NOTIFICATION, |
| 374 | IWM_SRC_LMAC, WAIT_NOTIF_TIMEOUT); |
| 375 | if (ret) { |
| 376 | IWM_ERR(iwm, "Wait for CALIBRATION_COMPLETE timeout\n"); |
| 377 | goto out; |
| 378 | } |
| 379 | |
| 380 | IWM_INFO(iwm, "LMAC calibration done: 0x%lx\n", iwm->calib_done_map); |
| 381 | |
| 382 | iwm_send_umac_reset(iwm, cpu_to_le32(UMAC_RST_CTRL_FLG_LARC_RESET), 1); |
| 383 | |
| 384 | ret = iwm_notif_handle(iwm, UMAC_CMD_OPCODE_RESET, IWM_SRC_UMAC, |
| 385 | WAIT_NOTIF_TIMEOUT); |
| 386 | if (ret) { |
| 387 | IWM_ERR(iwm, "Wait for UMAC RESET timeout\n"); |
| 388 | goto out; |
| 389 | } |
| 390 | |
| 391 | /* Download the operational LMAC */ |
| 392 | ret = iwm_load_lmac(iwm, iwm->bus_ops->lmac_name); |
| 393 | if (ret) { |
| 394 | IWM_ERR(iwm, "LMAC loading failed\n"); |
| 395 | goto out; |
| 396 | } |
| 397 | |
| 398 | ret = iwm_notif_handle(iwm, UMAC_NOTIFY_OPCODE_INIT_COMPLETE, |
| 399 | IWM_SRC_UMAC, WAIT_NOTIF_TIMEOUT); |
| 400 | if (ret) { |
| 401 | IWM_ERR(iwm, "Handle INIT_COMPLETE failed for LMAC: %d\n", ret); |
| 402 | goto out; |
| 403 | } |
| 404 | |
| 405 | iwm_send_prio_table(iwm); |
| 406 | iwm_send_calib_results(iwm); |
Zhu Yi | fd2c7fe | 2009-06-25 18:28:31 +0800 | [diff] [blame] | 407 | iwm_send_periodic_calib_cfg(iwm, periodic_calib_map); |
Samuel Ortiz | e85498b21 | 2009-10-16 13:18:48 +0800 | [diff] [blame] | 408 | iwm_send_ct_kill_cfg(iwm, iwm->conf.ct_kill_entry, |
| 409 | iwm->conf.ct_kill_exit); |
Zhu Yi | bb9f869 | 2009-05-21 21:20:45 +0800 | [diff] [blame] | 410 | |
| 411 | return 0; |
| 412 | |
| 413 | out: |
| 414 | iwm_eeprom_exit(iwm); |
| 415 | return ret; |
| 416 | } |