3 * Intel Management Engine Interface (Intel MEI) Linux driver
4 * Copyright (c) 2003-2012, Intel Corporation.
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms and conditions of the GNU General Public License,
8 * version 2, as published by the Free Software Foundation.
10 * This program is distributed in the hope it will be useful, but WITHOUT
11 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
12 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
20 #include <linux/types.h>
21 #include <linux/watchdog.h>
22 #include <linux/poll.h>
23 #include <linux/mei.h>
24 #include <linux/mei_cl_bus.h>
30 * watch dog definition
32 #define MEI_WD_HDR_SIZE 4
33 #define MEI_WD_STOP_MSG_SIZE MEI_WD_HDR_SIZE
34 #define MEI_WD_START_MSG_SIZE (MEI_WD_HDR_SIZE + 16)
36 #define MEI_WD_DEFAULT_TIMEOUT 120 /* seconds */
37 #define MEI_WD_MIN_TIMEOUT 120 /* seconds */
38 #define MEI_WD_MAX_TIMEOUT 65535 /* seconds */
40 #define MEI_WD_STOP_TIMEOUT 10 /* msecs */
42 #define MEI_WD_STATE_INDEPENDENCE_MSG_SENT (1 << 0)
44 #define MEI_RD_MSG_BUF_SIZE (128 * sizeof(u32))
50 extern const uuid_le mei_amthif_guid;
53 * Watchdog Client UUID
55 extern const uuid_le mei_wd_guid;
58 * Number of Maximum MEI Clients
60 #define MEI_CLIENTS_MAX 256
63 * maximum number of consecutive resets
65 #define MEI_MAX_CONSEC_RESET 3
68 * Number of File descriptors/handles
69 * that can be opened to the driver.
71 * Limit to 255: 256 Total Clients
72 * minus internal client for MEI Bus Messages
74 #define MEI_MAX_OPEN_HANDLE_COUNT (MEI_CLIENTS_MAX - 1)
77 * Internal Clients Number
79 #define MEI_HOST_CLIENT_ID_ANY (-1)
80 #define MEI_HBM_HOST_CLIENT_ID 0 /* not used, just for documentation */
81 #define MEI_WD_HOST_CLIENT_ID 1
82 #define MEI_IAMTHIF_HOST_CLIENT_ID 2
87 MEI_FILE_INITIALIZING = 0,
90 MEI_FILE_DISCONNECTING,
94 /* MEI device states */
96 MEI_DEV_INITIALIZING = 0,
105 const char *mei_dev_state_str(int state);
107 enum iamthif_states {
110 MEI_IAMTHIF_FLOW_CONTROL,
112 MEI_IAMTHIF_READ_COMPLETE
115 enum mei_file_transaction_states {
131 * enum mei_cb_file_ops - file operation associated with the callback
132 * @MEI_FOP_READ - read
133 * @MEI_FOP_WRITE - write
134 * @MEI_FOP_CONNECT - connect
135 * @MEI_FOP_DISCONNECT - disconnect
136 * @MEI_FOP_DISCONNECT_RSP - disconnect response
138 enum mei_cb_file_ops {
143 MEI_FOP_DISCONNECT_RSP,
147 * Intel MEI message data struct
149 struct mei_msg_data {
154 /* Maximum number of processed FW status registers */
155 #define MEI_FW_STATUS_MAX 2
158 * struct mei_fw_status - storage of FW status data
160 * @count - number of actually available elements in array
161 * @status - FW status registers
163 struct mei_fw_status {
165 u32 status[MEI_FW_STATUS_MAX];
169 * struct mei_me_client - representation of me (fw) client
171 * @props - client properties
172 * @client_id - me client id
173 * @mei_flow_ctrl_creds - flow control credits
175 struct mei_me_client {
176 struct list_head list;
177 struct mei_client_properties props;
179 u8 mei_flow_ctrl_creds;
186 * struct mei_cl_cb - file operation callback structure
188 * @cl - file client who is running this operation
189 * @fop_type - file operation type
192 struct list_head list;
194 enum mei_cb_file_ops fop_type;
195 struct mei_msg_data request_buffer;
196 struct mei_msg_data response_buffer;
197 unsigned long buf_idx;
198 unsigned long read_time;
199 struct file *file_object;
203 /* MEI client instance carried as file->private_data*/
205 struct list_head link;
206 struct mei_device *dev;
207 enum file_state state;
208 wait_queue_head_t tx_wait;
209 wait_queue_head_t rx_wait;
210 wait_queue_head_t wait;
212 /* ID of client connected */
216 u8 mei_flow_ctrl_creds;
218 enum mei_file_transaction_states reading_state;
219 enum mei_file_transaction_states writing_state;
220 struct mei_cl_cb *read_cb;
222 /* MEI CL bus data */
223 struct mei_cl_device *device;
224 struct list_head device_link;
227 /** struct mei_hw_ops
229 * @host_is_ready - query for host readiness
231 * @hw_is_ready - query if hw is ready
232 * @hw_reset - reset hw
233 * @hw_start - start hw after reset
234 * @hw_config - configure hw
236 * @pg_state - power gating state of the device
237 * @pg_is_enabled - is power gating enabled
239 * @intr_clear - clear pending interrupts
240 * @intr_enable - enable interrupts
241 * @intr_disable - disable interrupts
243 * @hbuf_free_slots - query for write buffer empty slots
244 * @hbuf_is_ready - query if write buffer is empty
245 * @hbuf_max_len - query for write buffer max len
247 * @write - write a message to FW
249 * @rdbuf_full_slots - query how many slots are filled
251 * @read_hdr - get first 4 bytes (header)
252 * @read - read a buffer from the FW
256 bool (*host_is_ready)(struct mei_device *dev);
258 bool (*hw_is_ready)(struct mei_device *dev);
259 int (*hw_reset)(struct mei_device *dev, bool enable);
260 int (*hw_start)(struct mei_device *dev);
261 void (*hw_config)(struct mei_device *dev);
263 enum mei_pg_state (*pg_state)(struct mei_device *dev);
264 bool (*pg_is_enabled)(struct mei_device *dev);
266 void (*intr_clear)(struct mei_device *dev);
267 void (*intr_enable)(struct mei_device *dev);
268 void (*intr_disable)(struct mei_device *dev);
270 int (*hbuf_free_slots)(struct mei_device *dev);
271 bool (*hbuf_is_ready)(struct mei_device *dev);
272 size_t (*hbuf_max_len)(const struct mei_device *dev);
274 int (*write)(struct mei_device *dev,
275 struct mei_msg_hdr *hdr,
278 int (*rdbuf_full_slots)(struct mei_device *dev);
280 u32 (*read_hdr)(const struct mei_device *dev);
281 int (*read)(struct mei_device *dev,
282 unsigned char *buf, unsigned long len);
288 * struct mei_cl_ops - MEI CL device ops
289 * This structure allows ME host clients to implement technology
290 * specific operations.
292 * @enable: Enable an MEI CL device. Some devices require specific
293 * HECI commands to initialize completely.
294 * @disable: Disable an MEI CL device.
295 * @send: Tx hook for the device. This allows ME host clients to trap
296 * the device driver buffers before actually physically
297 * pushing it to the ME.
298 * @recv: Rx hook for the device. This allows ME host clients to trap the
299 * ME buffers before forwarding them to the device driver.
302 int (*enable)(struct mei_cl_device *device);
303 int (*disable)(struct mei_cl_device *device);
304 int (*send)(struct mei_cl_device *device, u8 *buf, size_t length);
305 int (*recv)(struct mei_cl_device *device, u8 *buf, size_t length);
308 struct mei_cl_device *mei_cl_add_device(struct mei_device *dev,
309 uuid_le uuid, char *name,
310 struct mei_cl_ops *ops);
311 void mei_cl_remove_device(struct mei_cl_device *device);
313 int __mei_cl_async_send(struct mei_cl *cl, u8 *buf, size_t length);
314 int __mei_cl_send(struct mei_cl *cl, u8 *buf, size_t length);
315 int __mei_cl_recv(struct mei_cl *cl, u8 *buf, size_t length);
316 void mei_cl_bus_rx_event(struct mei_cl *cl);
317 void mei_cl_bus_remove_devices(struct mei_device *dev);
318 int mei_cl_bus_init(void);
319 void mei_cl_bus_exit(void);
323 * struct mei_cl_device - MEI device handle
324 * An mei_cl_device pointer is returned from mei_add_device()
325 * and links MEI bus clients to their actual ME host client pointer.
326 * Drivers for MEI devices will get an mei_cl_device pointer
327 * when being probed and shall use it for doing ME bus I/O.
329 * @dev: linux driver model device pointer
330 * @uuid: me client uuid
332 * @ops: ME transport ops
333 * @event_cb: Drivers register this callback to get asynchronous ME
334 * events (e.g. Rx buffer pending) notifications.
335 * @events: Events bitmask sent to the driver.
336 * @priv_data: client private data
338 struct mei_cl_device {
343 const struct mei_cl_ops *ops;
345 struct work_struct event_work;
346 mei_cl_event_cb_t event_cb;
348 unsigned long events;
355 * enum mei_pg_event - power gating transition events
357 * @MEI_PG_EVENT_IDLE: the driver is not in power gating transition
358 * @MEI_PG_EVENT_WAIT: the driver is waiting for a pg event to complete
359 * @MEI_PG_EVENT_RECEIVED: the driver received pg event
364 MEI_PG_EVENT_RECEIVED,
368 * enum mei_pg_state - device internal power gating state
370 * @MEI_PG_OFF: device is not power gated - it is active
371 * @MEI_PG_ON: device is power gated - it is in lower power state
378 const char *mei_pg_state_str(enum mei_pg_state state);
383 * @fw_status - FW status
384 * @quirk_probe - device exclusion quirk
387 const struct mei_fw_status fw_status;
388 bool (*quirk_probe)(struct pci_dev *pdev);
392 #define MEI_PCI_DEVICE(dev, cfg) \
393 .vendor = PCI_VENDOR_ID_INTEL, .device = (dev), \
394 .subvendor = PCI_ANY_ID, .subdevice = PCI_ANY_ID, \
395 .driver_data = (kernel_ulong_t)&(cfg)
399 * struct mei_device - MEI private device struct
401 * @pdev - pointer to pci device struct
402 * @cdev - character device
403 * @minor - minor number allocated for device
405 * @reset_count - limits the number of consecutive resets
406 * @hbm_state - state of host bus message protocol
408 * @hbm_f_pg_supported - hbm feature pgi protocol
410 * @pg_event - power gating event
411 * @mem_addr - mem mapped base register address
413 * @hbuf_depth - depth of hardware host/write buffer is slots
414 * @hbuf_is_ready - query if the host host/write buffer is ready
415 * @wr_msg - the buffer for hbm control messages
416 * @cfg - per device generation config and ops
419 struct pci_dev *pdev; /* pointer to pci device struct */
426 /* array of pointers to aio lists */
427 struct mei_cl_cb read_list; /* driver read queue */
428 struct mei_cl_cb write_list; /* driver write queue */
429 struct mei_cl_cb write_waiting_list; /* write waiting queue */
430 struct mei_cl_cb ctrl_wr_list; /* managed write IOCTL list */
431 struct mei_cl_cb ctrl_rd_list; /* managed read IOCTL list */
436 struct list_head file_list;
437 long open_handle_count;
440 * lock for the device
442 struct mutex device_lock; /* device lock */
443 struct delayed_work timer_work; /* MEI timer delayed work (timeouts) */
447 * waiting queue for receive message from FW
449 wait_queue_head_t wait_hw_ready;
450 wait_queue_head_t wait_pg;
451 wait_queue_head_t wait_hbm_start;
452 wait_queue_head_t wait_stop_wd;
457 unsigned long reset_count;
458 enum mei_dev_state dev_state;
459 enum mei_hbm_state hbm_state;
460 u16 init_clients_timer;
463 * Power Gating support
465 enum mei_pg_event pg_event;
466 #ifdef CONFIG_PM_RUNTIME
467 struct dev_pm_domain pg_domain;
468 #endif /* CONFIG_PM_RUNTIME */
470 unsigned char rd_msg_buf[MEI_RD_MSG_BUF_SIZE]; /* control messages */
477 /* used for control messages */
479 struct mei_msg_hdr hdr;
480 unsigned char data[128];
483 struct hbm_version version;
484 unsigned int hbm_f_pg_supported:1;
486 struct list_head me_clients;
487 DECLARE_BITMAP(me_clients_map, MEI_CLIENTS_MAX);
488 DECLARE_BITMAP(host_clients_map, MEI_CLIENTS_MAX);
489 unsigned long me_client_presentation_num;
490 unsigned long me_client_index;
493 enum mei_wd_states wd_state;
496 unsigned char wd_data[MEI_WD_START_MSG_SIZE];
499 /* amthif list for cmd waiting */
500 struct mei_cl_cb amthif_cmd_list;
501 /* driver managed amthif list for reading completed amthif cmd data */
502 struct mei_cl_cb amthif_rd_complete_list;
503 struct file *iamthif_file_object;
504 struct mei_cl iamthif_cl;
505 struct mei_cl_cb *iamthif_current_cb;
506 long iamthif_open_count;
508 unsigned long iamthif_timer;
509 u32 iamthif_stall_timer;
510 unsigned char *iamthif_msg_buf; /* Note: memory has to be allocated */
511 u32 iamthif_msg_buf_size;
512 u32 iamthif_msg_buf_index;
513 enum iamthif_states iamthif_state;
514 bool iamthif_flow_control_pending;
516 bool iamthif_canceled;
518 struct work_struct init_work;
519 struct work_struct reset_work;
521 /* List of bus devices */
522 struct list_head device_list;
524 #if IS_ENABLED(CONFIG_DEBUG_FS)
525 struct dentry *dbgfs_dir;
526 #endif /* CONFIG_DEBUG_FS */
529 const struct mei_hw_ops *ops;
530 const struct mei_cfg *cfg;
531 char hw[0] __aligned(sizeof(void *));
534 static inline unsigned long mei_secs_to_jiffies(unsigned long sec)
536 return msecs_to_jiffies(sec * MSEC_PER_SEC);
540 * mei_data2slots - get slots - number of (dwords) from a message length
541 * + size of the mei header
542 * @length - size of the messages in bytes
543 * returns - number of slots
545 static inline u32 mei_data2slots(size_t length)
547 return DIV_ROUND_UP(sizeof(struct mei_msg_hdr) + length, 4);
551 * mei_slots2data- get data in slots - bytes from slots
552 * @slots - number of available slots
553 * returns - number of bytes in slots
555 static inline u32 mei_slots2data(int slots)
561 * mei init function prototypes
563 void mei_device_init(struct mei_device *dev, const struct mei_cfg *cfg);
564 int mei_reset(struct mei_device *dev);
565 int mei_start(struct mei_device *dev);
566 int mei_restart(struct mei_device *dev);
567 void mei_stop(struct mei_device *dev);
568 void mei_cancel_work(struct mei_device *dev);
571 * MEI interrupt functions prototype
574 void mei_timer(struct work_struct *work);
575 int mei_irq_read_handler(struct mei_device *dev,
576 struct mei_cl_cb *cmpl_list, s32 *slots);
578 int mei_irq_write_handler(struct mei_device *dev, struct mei_cl_cb *cmpl_list);
579 void mei_irq_compl_handler(struct mei_device *dev, struct mei_cl_cb *cmpl_list);
582 * AMTHIF - AMT Host Interface Functions
584 void mei_amthif_reset_params(struct mei_device *dev);
586 int mei_amthif_host_init(struct mei_device *dev);
588 int mei_amthif_write(struct mei_device *dev, struct mei_cl_cb *priv_cb);
590 int mei_amthif_read(struct mei_device *dev, struct file *file,
591 char __user *ubuf, size_t length, loff_t *offset);
593 unsigned int mei_amthif_poll(struct mei_device *dev,
594 struct file *file, poll_table *wait);
596 int mei_amthif_release(struct mei_device *dev, struct file *file);
598 struct mei_cl_cb *mei_amthif_find_read_list_entry(struct mei_device *dev,
601 void mei_amthif_run_next_cmd(struct mei_device *dev);
603 int mei_amthif_irq_write(struct mei_cl *cl, struct mei_cl_cb *cb,
604 struct mei_cl_cb *cmpl_list);
606 void mei_amthif_complete(struct mei_device *dev, struct mei_cl_cb *cb);
607 int mei_amthif_irq_read_msg(struct mei_device *dev,
608 struct mei_msg_hdr *mei_hdr,
609 struct mei_cl_cb *complete_list);
610 int mei_amthif_irq_read(struct mei_device *dev, s32 *slots);
615 int mei_nfc_host_init(struct mei_device *dev);
616 void mei_nfc_host_exit(struct mei_device *dev);
621 extern const uuid_le mei_nfc_guid;
623 int mei_wd_send(struct mei_device *dev);
624 int mei_wd_stop(struct mei_device *dev);
625 int mei_wd_host_init(struct mei_device *dev);
627 * mei_watchdog_register - Registering watchdog interface
628 * once we got connection to the WD Client
631 int mei_watchdog_register(struct mei_device *dev);
633 * mei_watchdog_unregister - Unregistering watchdog interface
636 void mei_watchdog_unregister(struct mei_device *dev);
639 * Register Access Function
643 static inline void mei_hw_config(struct mei_device *dev)
645 dev->ops->hw_config(dev);
648 static inline enum mei_pg_state mei_pg_state(struct mei_device *dev)
650 return dev->ops->pg_state(dev);
653 static inline bool mei_pg_is_enabled(struct mei_device *dev)
655 return dev->ops->pg_is_enabled(dev);
658 static inline int mei_hw_reset(struct mei_device *dev, bool enable)
660 return dev->ops->hw_reset(dev, enable);
663 static inline int mei_hw_start(struct mei_device *dev)
665 return dev->ops->hw_start(dev);
668 static inline void mei_clear_interrupts(struct mei_device *dev)
670 dev->ops->intr_clear(dev);
673 static inline void mei_enable_interrupts(struct mei_device *dev)
675 dev->ops->intr_enable(dev);
678 static inline void mei_disable_interrupts(struct mei_device *dev)
680 dev->ops->intr_disable(dev);
683 static inline bool mei_host_is_ready(struct mei_device *dev)
685 return dev->ops->host_is_ready(dev);
687 static inline bool mei_hw_is_ready(struct mei_device *dev)
689 return dev->ops->hw_is_ready(dev);
692 static inline bool mei_hbuf_is_ready(struct mei_device *dev)
694 return dev->ops->hbuf_is_ready(dev);
697 static inline int mei_hbuf_empty_slots(struct mei_device *dev)
699 return dev->ops->hbuf_free_slots(dev);
702 static inline size_t mei_hbuf_max_len(const struct mei_device *dev)
704 return dev->ops->hbuf_max_len(dev);
707 static inline int mei_write_message(struct mei_device *dev,
708 struct mei_msg_hdr *hdr,
711 return dev->ops->write(dev, hdr, buf);
714 static inline u32 mei_read_hdr(const struct mei_device *dev)
716 return dev->ops->read_hdr(dev);
719 static inline void mei_read_slots(struct mei_device *dev,
720 unsigned char *buf, unsigned long len)
722 dev->ops->read(dev, buf, len);
725 static inline int mei_count_full_read_slots(struct mei_device *dev)
727 return dev->ops->rdbuf_full_slots(dev);
730 int mei_fw_status(struct mei_device *dev, struct mei_fw_status *fw_status);
732 #define FW_STS_FMT "%08X %08X"
733 #define FW_STS_PRM(fw_status) \
734 (fw_status).count > 0 ? (fw_status).status[0] : 0xDEADBEEF, \
735 (fw_status).count > 1 ? (fw_status).status[1] : 0xDEADBEEF
737 bool mei_hbuf_acquire(struct mei_device *dev);
739 bool mei_write_is_idle(struct mei_device *dev);
741 #if IS_ENABLED(CONFIG_DEBUG_FS)
742 int mei_dbgfs_register(struct mei_device *dev, const char *name);
743 void mei_dbgfs_deregister(struct mei_device *dev);
745 static inline int mei_dbgfs_register(struct mei_device *dev, const char *name)
749 static inline void mei_dbgfs_deregister(struct mei_device *dev) {}
750 #endif /* CONFIG_DEBUG_FS */
752 int mei_register(struct mei_device *dev, struct device *parent);
753 void mei_deregister(struct mei_device *dev);
755 #define MEI_HDR_FMT "hdr:host=%02d me=%02d len=%d internal=%1d comp=%1d"
756 #define MEI_HDR_PRM(hdr) \
757 (hdr)->host_addr, (hdr)->me_addr, \
758 (hdr)->length, (hdr)->internal, (hdr)->msg_complete