18c2ecf20Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0-or-later
28c2ecf20Sopenharmony_ci/*
38c2ecf20Sopenharmony_ci * OLPC serio driver for multiplexed input from Marvell MMP security processor
48c2ecf20Sopenharmony_ci *
58c2ecf20Sopenharmony_ci * Copyright (C) 2011-2013 One Laptop Per Child
68c2ecf20Sopenharmony_ci */
78c2ecf20Sopenharmony_ci
88c2ecf20Sopenharmony_ci#include <linux/module.h>
98c2ecf20Sopenharmony_ci#include <linux/interrupt.h>
108c2ecf20Sopenharmony_ci#include <linux/serio.h>
118c2ecf20Sopenharmony_ci#include <linux/err.h>
128c2ecf20Sopenharmony_ci#include <linux/platform_device.h>
138c2ecf20Sopenharmony_ci#include <linux/io.h>
148c2ecf20Sopenharmony_ci#include <linux/of.h>
158c2ecf20Sopenharmony_ci#include <linux/slab.h>
168c2ecf20Sopenharmony_ci#include <linux/delay.h>
178c2ecf20Sopenharmony_ci
188c2ecf20Sopenharmony_ci/*
198c2ecf20Sopenharmony_ci * The OLPC XO-1.75 and XO-4 laptops do not have a hardware PS/2 controller.
208c2ecf20Sopenharmony_ci * Instead, the OLPC firmware runs a bit-banging PS/2 implementation on an
218c2ecf20Sopenharmony_ci * otherwise-unused slow processor which is included in the Marvell MMP2/MMP3
228c2ecf20Sopenharmony_ci * SoC, known as the "Security Processor" (SP) or "Wireless Trusted Module"
238c2ecf20Sopenharmony_ci * (WTM). This firmware then reports its results via the WTM registers,
248c2ecf20Sopenharmony_ci * which we read from the Application Processor (AP, i.e. main CPU) in this
258c2ecf20Sopenharmony_ci * driver.
268c2ecf20Sopenharmony_ci *
278c2ecf20Sopenharmony_ci * On the hardware side we have a PS/2 mouse and an AT keyboard, the data
288c2ecf20Sopenharmony_ci * is multiplexed through this system. We create a serio port for each one,
298c2ecf20Sopenharmony_ci * and demultiplex the data accordingly.
308c2ecf20Sopenharmony_ci */
318c2ecf20Sopenharmony_ci
328c2ecf20Sopenharmony_ci/* WTM register offsets */
338c2ecf20Sopenharmony_ci#define SECURE_PROCESSOR_COMMAND	0x40
348c2ecf20Sopenharmony_ci#define COMMAND_RETURN_STATUS		0x80
358c2ecf20Sopenharmony_ci#define COMMAND_FIFO_STATUS		0xc4
368c2ecf20Sopenharmony_ci#define PJ_RST_INTERRUPT		0xc8
378c2ecf20Sopenharmony_ci#define PJ_INTERRUPT_MASK		0xcc
388c2ecf20Sopenharmony_ci
398c2ecf20Sopenharmony_ci/*
408c2ecf20Sopenharmony_ci * The upper byte of SECURE_PROCESSOR_COMMAND and COMMAND_RETURN_STATUS is
418c2ecf20Sopenharmony_ci * used to identify which port (device) is being talked to. The lower byte
428c2ecf20Sopenharmony_ci * is the data being sent/received.
438c2ecf20Sopenharmony_ci */
448c2ecf20Sopenharmony_ci#define PORT_MASK	0xff00
458c2ecf20Sopenharmony_ci#define DATA_MASK	0x00ff
468c2ecf20Sopenharmony_ci#define PORT_SHIFT	8
478c2ecf20Sopenharmony_ci#define KEYBOARD_PORT	0
488c2ecf20Sopenharmony_ci#define TOUCHPAD_PORT	1
498c2ecf20Sopenharmony_ci
508c2ecf20Sopenharmony_ci/* COMMAND_FIFO_STATUS */
518c2ecf20Sopenharmony_ci#define CMD_CNTR_MASK		0x7 /* Number of pending/unprocessed commands */
528c2ecf20Sopenharmony_ci#define MAX_PENDING_CMDS	4   /* from device specs */
538c2ecf20Sopenharmony_ci
548c2ecf20Sopenharmony_ci/* PJ_RST_INTERRUPT */
558c2ecf20Sopenharmony_ci#define SP_COMMAND_COMPLETE_RESET	0x1
568c2ecf20Sopenharmony_ci
578c2ecf20Sopenharmony_ci/* PJ_INTERRUPT_MASK */
588c2ecf20Sopenharmony_ci#define INT_0	(1 << 0)
598c2ecf20Sopenharmony_ci
608c2ecf20Sopenharmony_ci/* COMMAND_FIFO_STATUS */
618c2ecf20Sopenharmony_ci#define CMD_STS_MASK	0x100
628c2ecf20Sopenharmony_ci
638c2ecf20Sopenharmony_cistruct olpc_apsp {
648c2ecf20Sopenharmony_ci	struct device *dev;
658c2ecf20Sopenharmony_ci	struct serio *kbio;
668c2ecf20Sopenharmony_ci	struct serio *padio;
678c2ecf20Sopenharmony_ci	void __iomem *base;
688c2ecf20Sopenharmony_ci	int open_count;
698c2ecf20Sopenharmony_ci	int irq;
708c2ecf20Sopenharmony_ci};
718c2ecf20Sopenharmony_ci
728c2ecf20Sopenharmony_cistatic int olpc_apsp_write(struct serio *port, unsigned char val)
738c2ecf20Sopenharmony_ci{
748c2ecf20Sopenharmony_ci	struct olpc_apsp *priv = port->port_data;
758c2ecf20Sopenharmony_ci	unsigned int i;
768c2ecf20Sopenharmony_ci	u32 which = 0;
778c2ecf20Sopenharmony_ci
788c2ecf20Sopenharmony_ci	if (port == priv->padio)
798c2ecf20Sopenharmony_ci		which = TOUCHPAD_PORT << PORT_SHIFT;
808c2ecf20Sopenharmony_ci	else
818c2ecf20Sopenharmony_ci		which = KEYBOARD_PORT << PORT_SHIFT;
828c2ecf20Sopenharmony_ci
838c2ecf20Sopenharmony_ci	dev_dbg(priv->dev, "olpc_apsp_write which=%x val=%x\n", which, val);
848c2ecf20Sopenharmony_ci	for (i = 0; i < 50; i++) {
858c2ecf20Sopenharmony_ci		u32 sts = readl(priv->base + COMMAND_FIFO_STATUS);
868c2ecf20Sopenharmony_ci		if ((sts & CMD_CNTR_MASK) < MAX_PENDING_CMDS) {
878c2ecf20Sopenharmony_ci			writel(which | val,
888c2ecf20Sopenharmony_ci			       priv->base + SECURE_PROCESSOR_COMMAND);
898c2ecf20Sopenharmony_ci			return 0;
908c2ecf20Sopenharmony_ci		}
918c2ecf20Sopenharmony_ci		/* SP busy. This has not been seen in practice. */
928c2ecf20Sopenharmony_ci		mdelay(1);
938c2ecf20Sopenharmony_ci	}
948c2ecf20Sopenharmony_ci
958c2ecf20Sopenharmony_ci	dev_dbg(priv->dev, "olpc_apsp_write timeout, status=%x\n",
968c2ecf20Sopenharmony_ci		readl(priv->base + COMMAND_FIFO_STATUS));
978c2ecf20Sopenharmony_ci
988c2ecf20Sopenharmony_ci	return -ETIMEDOUT;
998c2ecf20Sopenharmony_ci}
1008c2ecf20Sopenharmony_ci
1018c2ecf20Sopenharmony_cistatic irqreturn_t olpc_apsp_rx(int irq, void *dev_id)
1028c2ecf20Sopenharmony_ci{
1038c2ecf20Sopenharmony_ci	struct olpc_apsp *priv = dev_id;
1048c2ecf20Sopenharmony_ci	unsigned int w, tmp;
1058c2ecf20Sopenharmony_ci	struct serio *serio;
1068c2ecf20Sopenharmony_ci
1078c2ecf20Sopenharmony_ci	/*
1088c2ecf20Sopenharmony_ci	 * Write 1 to PJ_RST_INTERRUPT to acknowledge and clear the interrupt
1098c2ecf20Sopenharmony_ci	 * Write 0xff00 to SECURE_PROCESSOR_COMMAND.
1108c2ecf20Sopenharmony_ci	 */
1118c2ecf20Sopenharmony_ci	tmp = readl(priv->base + PJ_RST_INTERRUPT);
1128c2ecf20Sopenharmony_ci	if (!(tmp & SP_COMMAND_COMPLETE_RESET)) {
1138c2ecf20Sopenharmony_ci		dev_warn(priv->dev, "spurious interrupt?\n");
1148c2ecf20Sopenharmony_ci		return IRQ_NONE;
1158c2ecf20Sopenharmony_ci	}
1168c2ecf20Sopenharmony_ci
1178c2ecf20Sopenharmony_ci	w = readl(priv->base + COMMAND_RETURN_STATUS);
1188c2ecf20Sopenharmony_ci	dev_dbg(priv->dev, "olpc_apsp_rx %x\n", w);
1198c2ecf20Sopenharmony_ci
1208c2ecf20Sopenharmony_ci	if (w >> PORT_SHIFT == KEYBOARD_PORT)
1218c2ecf20Sopenharmony_ci		serio = priv->kbio;
1228c2ecf20Sopenharmony_ci	else
1238c2ecf20Sopenharmony_ci		serio = priv->padio;
1248c2ecf20Sopenharmony_ci
1258c2ecf20Sopenharmony_ci	serio_interrupt(serio, w & DATA_MASK, 0);
1268c2ecf20Sopenharmony_ci
1278c2ecf20Sopenharmony_ci	/* Ack and clear interrupt */
1288c2ecf20Sopenharmony_ci	writel(tmp | SP_COMMAND_COMPLETE_RESET, priv->base + PJ_RST_INTERRUPT);
1298c2ecf20Sopenharmony_ci	writel(PORT_MASK, priv->base + SECURE_PROCESSOR_COMMAND);
1308c2ecf20Sopenharmony_ci
1318c2ecf20Sopenharmony_ci	pm_wakeup_event(priv->dev, 1000);
1328c2ecf20Sopenharmony_ci	return IRQ_HANDLED;
1338c2ecf20Sopenharmony_ci}
1348c2ecf20Sopenharmony_ci
1358c2ecf20Sopenharmony_cistatic int olpc_apsp_open(struct serio *port)
1368c2ecf20Sopenharmony_ci{
1378c2ecf20Sopenharmony_ci	struct olpc_apsp *priv = port->port_data;
1388c2ecf20Sopenharmony_ci	unsigned int tmp;
1398c2ecf20Sopenharmony_ci	unsigned long l;
1408c2ecf20Sopenharmony_ci
1418c2ecf20Sopenharmony_ci	if (priv->open_count++ == 0) {
1428c2ecf20Sopenharmony_ci		l = readl(priv->base + COMMAND_FIFO_STATUS);
1438c2ecf20Sopenharmony_ci		if (!(l & CMD_STS_MASK)) {
1448c2ecf20Sopenharmony_ci			dev_err(priv->dev, "SP cannot accept commands.\n");
1458c2ecf20Sopenharmony_ci			return -EIO;
1468c2ecf20Sopenharmony_ci		}
1478c2ecf20Sopenharmony_ci
1488c2ecf20Sopenharmony_ci		/* Enable interrupt 0 by clearing its bit */
1498c2ecf20Sopenharmony_ci		tmp = readl(priv->base + PJ_INTERRUPT_MASK);
1508c2ecf20Sopenharmony_ci		writel(tmp & ~INT_0, priv->base + PJ_INTERRUPT_MASK);
1518c2ecf20Sopenharmony_ci	}
1528c2ecf20Sopenharmony_ci
1538c2ecf20Sopenharmony_ci	return 0;
1548c2ecf20Sopenharmony_ci}
1558c2ecf20Sopenharmony_ci
1568c2ecf20Sopenharmony_cistatic void olpc_apsp_close(struct serio *port)
1578c2ecf20Sopenharmony_ci{
1588c2ecf20Sopenharmony_ci	struct olpc_apsp *priv = port->port_data;
1598c2ecf20Sopenharmony_ci	unsigned int tmp;
1608c2ecf20Sopenharmony_ci
1618c2ecf20Sopenharmony_ci	if (--priv->open_count == 0) {
1628c2ecf20Sopenharmony_ci		/* Disable interrupt 0 */
1638c2ecf20Sopenharmony_ci		tmp = readl(priv->base + PJ_INTERRUPT_MASK);
1648c2ecf20Sopenharmony_ci		writel(tmp | INT_0, priv->base + PJ_INTERRUPT_MASK);
1658c2ecf20Sopenharmony_ci	}
1668c2ecf20Sopenharmony_ci}
1678c2ecf20Sopenharmony_ci
1688c2ecf20Sopenharmony_cistatic int olpc_apsp_probe(struct platform_device *pdev)
1698c2ecf20Sopenharmony_ci{
1708c2ecf20Sopenharmony_ci	struct serio *kb_serio, *pad_serio;
1718c2ecf20Sopenharmony_ci	struct olpc_apsp *priv;
1728c2ecf20Sopenharmony_ci	struct resource *res;
1738c2ecf20Sopenharmony_ci	int error;
1748c2ecf20Sopenharmony_ci
1758c2ecf20Sopenharmony_ci	priv = devm_kzalloc(&pdev->dev, sizeof(struct olpc_apsp), GFP_KERNEL);
1768c2ecf20Sopenharmony_ci	if (!priv)
1778c2ecf20Sopenharmony_ci		return -ENOMEM;
1788c2ecf20Sopenharmony_ci
1798c2ecf20Sopenharmony_ci	priv->dev = &pdev->dev;
1808c2ecf20Sopenharmony_ci
1818c2ecf20Sopenharmony_ci	res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
1828c2ecf20Sopenharmony_ci	priv->base = devm_ioremap_resource(&pdev->dev, res);
1838c2ecf20Sopenharmony_ci	if (IS_ERR(priv->base)) {
1848c2ecf20Sopenharmony_ci		dev_err(&pdev->dev, "Failed to map WTM registers\n");
1858c2ecf20Sopenharmony_ci		return PTR_ERR(priv->base);
1868c2ecf20Sopenharmony_ci	}
1878c2ecf20Sopenharmony_ci
1888c2ecf20Sopenharmony_ci	priv->irq = platform_get_irq(pdev, 0);
1898c2ecf20Sopenharmony_ci	if (priv->irq < 0)
1908c2ecf20Sopenharmony_ci		return priv->irq;
1918c2ecf20Sopenharmony_ci
1928c2ecf20Sopenharmony_ci	/* KEYBOARD */
1938c2ecf20Sopenharmony_ci	kb_serio = kzalloc(sizeof(struct serio), GFP_KERNEL);
1948c2ecf20Sopenharmony_ci	if (!kb_serio)
1958c2ecf20Sopenharmony_ci		return -ENOMEM;
1968c2ecf20Sopenharmony_ci	kb_serio->id.type	= SERIO_8042_XL;
1978c2ecf20Sopenharmony_ci	kb_serio->write		= olpc_apsp_write;
1988c2ecf20Sopenharmony_ci	kb_serio->open		= olpc_apsp_open;
1998c2ecf20Sopenharmony_ci	kb_serio->close		= olpc_apsp_close;
2008c2ecf20Sopenharmony_ci	kb_serio->port_data	= priv;
2018c2ecf20Sopenharmony_ci	kb_serio->dev.parent	= &pdev->dev;
2028c2ecf20Sopenharmony_ci	strlcpy(kb_serio->name, "sp keyboard", sizeof(kb_serio->name));
2038c2ecf20Sopenharmony_ci	strlcpy(kb_serio->phys, "sp/serio0", sizeof(kb_serio->phys));
2048c2ecf20Sopenharmony_ci	priv->kbio		= kb_serio;
2058c2ecf20Sopenharmony_ci	serio_register_port(kb_serio);
2068c2ecf20Sopenharmony_ci
2078c2ecf20Sopenharmony_ci	/* TOUCHPAD */
2088c2ecf20Sopenharmony_ci	pad_serio = kzalloc(sizeof(struct serio), GFP_KERNEL);
2098c2ecf20Sopenharmony_ci	if (!pad_serio) {
2108c2ecf20Sopenharmony_ci		error = -ENOMEM;
2118c2ecf20Sopenharmony_ci		goto err_pad;
2128c2ecf20Sopenharmony_ci	}
2138c2ecf20Sopenharmony_ci	pad_serio->id.type	= SERIO_8042;
2148c2ecf20Sopenharmony_ci	pad_serio->write	= olpc_apsp_write;
2158c2ecf20Sopenharmony_ci	pad_serio->open		= olpc_apsp_open;
2168c2ecf20Sopenharmony_ci	pad_serio->close	= olpc_apsp_close;
2178c2ecf20Sopenharmony_ci	pad_serio->port_data	= priv;
2188c2ecf20Sopenharmony_ci	pad_serio->dev.parent	= &pdev->dev;
2198c2ecf20Sopenharmony_ci	strlcpy(pad_serio->name, "sp touchpad", sizeof(pad_serio->name));
2208c2ecf20Sopenharmony_ci	strlcpy(pad_serio->phys, "sp/serio1", sizeof(pad_serio->phys));
2218c2ecf20Sopenharmony_ci	priv->padio		= pad_serio;
2228c2ecf20Sopenharmony_ci	serio_register_port(pad_serio);
2238c2ecf20Sopenharmony_ci
2248c2ecf20Sopenharmony_ci	error = request_irq(priv->irq, olpc_apsp_rx, 0, "olpc-apsp", priv);
2258c2ecf20Sopenharmony_ci	if (error) {
2268c2ecf20Sopenharmony_ci		dev_err(&pdev->dev, "Failed to request IRQ\n");
2278c2ecf20Sopenharmony_ci		goto err_irq;
2288c2ecf20Sopenharmony_ci	}
2298c2ecf20Sopenharmony_ci
2308c2ecf20Sopenharmony_ci	device_init_wakeup(priv->dev, 1);
2318c2ecf20Sopenharmony_ci	platform_set_drvdata(pdev, priv);
2328c2ecf20Sopenharmony_ci
2338c2ecf20Sopenharmony_ci	dev_dbg(&pdev->dev, "probed successfully.\n");
2348c2ecf20Sopenharmony_ci	return 0;
2358c2ecf20Sopenharmony_ci
2368c2ecf20Sopenharmony_cierr_irq:
2378c2ecf20Sopenharmony_ci	serio_unregister_port(pad_serio);
2388c2ecf20Sopenharmony_cierr_pad:
2398c2ecf20Sopenharmony_ci	serio_unregister_port(kb_serio);
2408c2ecf20Sopenharmony_ci	return error;
2418c2ecf20Sopenharmony_ci}
2428c2ecf20Sopenharmony_ci
2438c2ecf20Sopenharmony_cistatic int olpc_apsp_remove(struct platform_device *pdev)
2448c2ecf20Sopenharmony_ci{
2458c2ecf20Sopenharmony_ci	struct olpc_apsp *priv = platform_get_drvdata(pdev);
2468c2ecf20Sopenharmony_ci
2478c2ecf20Sopenharmony_ci	free_irq(priv->irq, priv);
2488c2ecf20Sopenharmony_ci
2498c2ecf20Sopenharmony_ci	serio_unregister_port(priv->kbio);
2508c2ecf20Sopenharmony_ci	serio_unregister_port(priv->padio);
2518c2ecf20Sopenharmony_ci
2528c2ecf20Sopenharmony_ci	return 0;
2538c2ecf20Sopenharmony_ci}
2548c2ecf20Sopenharmony_ci
2558c2ecf20Sopenharmony_cistatic const struct of_device_id olpc_apsp_dt_ids[] = {
2568c2ecf20Sopenharmony_ci	{ .compatible = "olpc,ap-sp", },
2578c2ecf20Sopenharmony_ci	{}
2588c2ecf20Sopenharmony_ci};
2598c2ecf20Sopenharmony_ciMODULE_DEVICE_TABLE(of, olpc_apsp_dt_ids);
2608c2ecf20Sopenharmony_ci
2618c2ecf20Sopenharmony_cistatic struct platform_driver olpc_apsp_driver = {
2628c2ecf20Sopenharmony_ci	.probe		= olpc_apsp_probe,
2638c2ecf20Sopenharmony_ci	.remove		= olpc_apsp_remove,
2648c2ecf20Sopenharmony_ci	.driver		= {
2658c2ecf20Sopenharmony_ci		.name	= "olpc-apsp",
2668c2ecf20Sopenharmony_ci		.of_match_table = olpc_apsp_dt_ids,
2678c2ecf20Sopenharmony_ci	},
2688c2ecf20Sopenharmony_ci};
2698c2ecf20Sopenharmony_ci
2708c2ecf20Sopenharmony_ciMODULE_DESCRIPTION("OLPC AP-SP serio driver");
2718c2ecf20Sopenharmony_ciMODULE_LICENSE("GPL");
2728c2ecf20Sopenharmony_cimodule_platform_driver(olpc_apsp_driver);
273