mirror of
https://github.com/Telecominfraproject/OpenCellular.git
synced 2025-12-31 02:51:26 +00:00
Currently the Cr50 code resets TPM communications layer at a certain point during TPM reset process. It turns out that this is not sufficient - the comms layer keeps receiving and trying to invoke TPM layer, which does not mesh well with TPM reset. Let's provide two callbacks for each comms layer - to shut it down and to bring it back up. We shut down the comms when starting TPM reset and bring them back up when reset is completed. BRANCH=cr50 BUG=b:68012381 TEST=ran AP firmware test suite on both SPI and I2C based devices. Change-Id: I7caf4a09b9a5c6e5fc6bfe60eae1c0d64ab24904 Signed-off-by: Vadim Bendebury <vbendeb@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/754502 Reviewed-by: Randall Spangler <rspangler@chromium.org> Reviewed-by: Mary Ruthven <mruthven@chromium.org>
401 lines
12 KiB
C
401 lines
12 KiB
C
/* Copyright 2016 The Chromium OS Authors. All rights reserved.
|
|
* Use of this source code is governed by a BSD-style license that can be
|
|
* found in the LICENSE file.
|
|
*/
|
|
|
|
/*
|
|
* This is a driver for the I2C Slave controller (i2cs) of the g chip.
|
|
*
|
|
* The controller is has two register files, 64 bytes each, one for storing
|
|
* data received from the master, and one for storing data to be transmitted
|
|
* to the master. Both files are accessed only as 4 byte quantities, so the
|
|
* driver must provide adaptation to concatenate messages with sizes not
|
|
* divisible by 4 and or not properly aligned.
|
|
*
|
|
* The file holding data written by the master has associated with it a
|
|
* register showing where the controller accessed the file last, comparing it
|
|
* with its previous value tells the driver how many bytes recently written by
|
|
* the master are there.
|
|
*
|
|
* The file holding data to be read by the master has a register associated
|
|
* with it showing where was the latest BIT the controller transmitted.
|
|
*
|
|
* The controller can generate interrupts on three different conditions:
|
|
* - beginning of a read cycle
|
|
* - end of a read cycle
|
|
* - end of a write cycle
|
|
*
|
|
* Since this driver's major role is to serve as a TPM interface, it is safe
|
|
* to assume that the master will always write first, even when it needs to
|
|
* read data from the device.
|
|
*
|
|
* Each write or read access will be started by the master writing the one
|
|
* byte address of the TPM register to access.
|
|
*
|
|
* If the master needs to read this register, the originating write
|
|
* transaction will be limited to a single byte payload, a read transaction
|
|
* would follow immediately.
|
|
*
|
|
* If the master needs to write into this register, the data to be written
|
|
* will be included in the same i2c transaction immediately following the one
|
|
* byte register address.
|
|
*
|
|
* This protocol allows to keep the driver simple: the only interrupt the
|
|
* driver enables is the 'end a write cycle'. The number of bytes received
|
|
* from the master gives the callback function a hint as of what the master
|
|
* intention is, to read or to write.
|
|
*
|
|
* In both cases the same callback function is called. On write accesses the
|
|
* callback function converts the data as necessary and passes it to the TPM.
|
|
* On read accesses the callback function retrieves data from the TPM and puts
|
|
* it into the read register file to be available to the master to retrieve in
|
|
* the following read access. In both cases the callback function completes
|
|
* processing on the invoking interrupt context.
|
|
*
|
|
* The driver API consists of two functions, one to register the callback to
|
|
* process interrupts, another one - to add a byte to the master read register
|
|
* file. See the accompanying .h file for details.
|
|
*
|
|
* TODO:
|
|
* - figure out flow control - clock stretching can be challenging with this
|
|
* controller.
|
|
* - detect and recover from overflow/underflow situations
|
|
*/
|
|
|
|
#include "common.h"
|
|
#include "console.h"
|
|
#include "gpio.h"
|
|
#include "hooks.h"
|
|
#include "i2cs.h"
|
|
#include "pmu.h"
|
|
#include "registers.h"
|
|
#include "system.h"
|
|
#include "task.h"
|
|
#include "tpm_log.h"
|
|
|
|
#define REGISTER_FILE_SIZE (1 << 6) /* 64 bytes. */
|
|
#define REGISTER_FILE_MASK (REGISTER_FILE_SIZE - 1)
|
|
|
|
/* Console output macros */
|
|
#define CPUTS(outstr) cputs(CC_I2C, outstr)
|
|
#define CPRINTF(format, args...) cprints(CC_I2C, format, ## args)
|
|
|
|
/* Pointer to the function to invoke on the write complete interrupts. */
|
|
static wr_complete_handler_f write_complete_handler_;
|
|
|
|
/* A buffer to normalize the received data to pass it to the user. */
|
|
static uint8_t i2cs_buffer[REGISTER_FILE_SIZE];
|
|
|
|
/*
|
|
* Pointer where the CPU stopped retrieving the write data sent by the master
|
|
* last time the write access was processed.
|
|
*/
|
|
static uint16_t last_write_pointer;
|
|
|
|
/*
|
|
* Pointer where the CPU stopped writing data for the master to read last time
|
|
* the read data was prepared.
|
|
*/
|
|
static uint16_t last_read_pointer;
|
|
|
|
/*
|
|
* Keep track of i2c interrupts and the number of times the "hosed slave"
|
|
* condition was encountered.
|
|
*/
|
|
static uint16_t i2cs_read_irq_count;
|
|
static uint16_t i2cs_read_recovery_count;
|
|
|
|
static void i2cs_init(void)
|
|
{
|
|
/* First decide if i2c is even needed for this platform. */
|
|
/* if (i2cs is not needed) return; */
|
|
if (!board_tpm_uses_i2c())
|
|
return;
|
|
|
|
pmu_clock_en(PERIPH_I2CS);
|
|
|
|
/*
|
|
* Toggle the reset register to make sure i2cs interface is in the
|
|
* initial state even if it is mid transaction at this time.
|
|
*/
|
|
GWRITE_FIELD(PMU, RST0, DI2CS0, 1);
|
|
|
|
/*
|
|
* This initialization is guraranteed to take way more than enough
|
|
* time for the reset to kick in.
|
|
*/
|
|
memset(i2cs_buffer, 0, sizeof(i2cs_buffer));
|
|
last_write_pointer = 0;
|
|
last_read_pointer = 0;
|
|
i2cs_read_irq_count = 0;
|
|
|
|
GWRITE_FIELD(PMU, RST0, DI2CS0, 0);
|
|
|
|
|
|
/* Set pinmux registers for I2CS interface */
|
|
i2cs_set_pinmux();
|
|
|
|
/* Enable I2CS interrupt */
|
|
GWRITE_FIELD(I2CS, INT_ENABLE, INTR_WRITE_COMPLETE, 1);
|
|
|
|
/* Slave address is hardcoded to 0x50. */
|
|
GWRITE(I2CS, SLAVE_DEVADDRVAL, 0x50);
|
|
}
|
|
|
|
/* Forward declaration of the hook function. */
|
|
static void poll_read_state(void);
|
|
DECLARE_DEFERRED(poll_read_state);
|
|
|
|
/* Poll SDA line to detect the "hosed" condition. */
|
|
#define READ_STATUS_CHECK_INTERVAL (500 * MSEC)
|
|
|
|
/*
|
|
* Check for receive problems, if found - reinitialize the i2c slave
|
|
* interface.
|
|
*/
|
|
static void poll_read_state(void)
|
|
{
|
|
/*
|
|
* Make sure there is no accidental match between
|
|
* last_i2cs_read_irq_count and i2cs_read_irq_count if the first run
|
|
* of this function happens when SDA is low.
|
|
*/
|
|
static uint16_t last_i2cs_read_irq_count = ~0;
|
|
|
|
if (ap_is_on()) {
|
|
if (!gpio_get_level(GPIO_I2CS_SDA)) {
|
|
if (last_i2cs_read_irq_count == i2cs_read_irq_count) {
|
|
/*
|
|
* SDA line is low and number of RX interrupts
|
|
* has not changed since last poll when it was
|
|
* low, it must be hosed. Reinitialize the i2c
|
|
* interface (which will also restart this
|
|
* polling function).
|
|
*/
|
|
last_i2cs_read_irq_count = ~0;
|
|
i2cs_read_recovery_count++;
|
|
i2cs_register_write_complete_handler
|
|
(write_complete_handler_);
|
|
|
|
#ifdef CONFIG_TPM_LOGGING
|
|
tpm_log_event(TPM_I2C_RESET,
|
|
i2cs_read_recovery_count);
|
|
#endif
|
|
return;
|
|
}
|
|
last_i2cs_read_irq_count = i2cs_read_irq_count;
|
|
}
|
|
} else {
|
|
/*
|
|
* AP is off, let's make sure that in case this function
|
|
* happens to run right after AP wakes up and i2c is active,
|
|
* there is no false positive 'hosed' condition detection.
|
|
*/
|
|
if (last_i2cs_read_irq_count == i2cs_read_irq_count)
|
|
last_i2cs_read_irq_count -= 1;
|
|
}
|
|
hook_call_deferred(&poll_read_state_data, READ_STATUS_CHECK_INTERVAL);
|
|
}
|
|
|
|
/* Process the 'end of a write cycle' interrupt. */
|
|
static void _i2cs_write_complete_int(void)
|
|
{
|
|
/* Reset the IRQ condition. */
|
|
GWRITE_FIELD(I2CS, INT_STATE, INTR_WRITE_COMPLETE, 1);
|
|
|
|
/* We're receiving some bytes, so don't sleep */
|
|
disable_sleep(SLEEP_MASK_I2C_SLAVE);
|
|
|
|
if (write_complete_handler_) {
|
|
uint16_t bytes_written;
|
|
uint16_t bytes_processed;
|
|
uint32_t word_in_value = 0;
|
|
|
|
/* How many bytes has the master just written. */
|
|
bytes_written = ((uint16_t)GREAD(I2CS, WRITE_PTR) -
|
|
last_write_pointer) & REGISTER_FILE_MASK;
|
|
|
|
/* How many have been processed yet. */
|
|
bytes_processed = 0;
|
|
|
|
/* Make sure we start with something. */
|
|
if (last_write_pointer & 3)
|
|
word_in_value = *(GREG32_ADDR(I2CS, WRITE_BUFFER0) +
|
|
(last_write_pointer >> 2));
|
|
while (bytes_written != bytes_processed) {
|
|
/*
|
|
* This loop iterates over bytes retrieved from the
|
|
* master write register file in 4 byte quantities.
|
|
* Each time the ever incrementing last_write_pointer
|
|
* is aligned at 4 bytes, a new value needs to be
|
|
* retrieved from the next register, indexed by
|
|
* last_write_pointer/4.
|
|
*/
|
|
|
|
if (!(last_write_pointer & 3))
|
|
/* Time to get a new value. */
|
|
word_in_value = *(GREG32_ADDR(
|
|
I2CS, WRITE_BUFFER0) +
|
|
(last_write_pointer >> 2));
|
|
|
|
/* Save the next byte in the adaptation buffer. */
|
|
i2cs_buffer[bytes_processed] =
|
|
word_in_value >> (8 * (last_write_pointer & 3));
|
|
|
|
/* The pointer wraps at the register file size. */
|
|
last_write_pointer = (last_write_pointer + 1) &
|
|
REGISTER_FILE_MASK;
|
|
bytes_processed++;
|
|
}
|
|
|
|
/* Invoke the callback to process the message. */
|
|
write_complete_handler_(i2cs_buffer, bytes_processed);
|
|
|
|
if (bytes_processed == 1)
|
|
i2cs_read_irq_count++;
|
|
}
|
|
|
|
/*
|
|
* Could be the end of a TPM trasaction. Set sleep to be reenabled in 1
|
|
* second. If this is not the end of a TPM response, then sleep will be
|
|
* disabled again in the next I2CS interrupt.
|
|
*/
|
|
delay_sleep_by(1 * SECOND);
|
|
enable_sleep(SLEEP_MASK_I2C_SLAVE);
|
|
}
|
|
DECLARE_IRQ(GC_IRQNUM_I2CS0_INTR_WRITE_COMPLETE_INT,
|
|
_i2cs_write_complete_int, 1);
|
|
|
|
void i2cs_post_read_data(uint8_t byte_to_read)
|
|
{
|
|
volatile uint32_t *value_addr;
|
|
uint32_t word_out_value;
|
|
uint32_t shift;
|
|
|
|
/*
|
|
* Find out which register of the register file the byte needs to go
|
|
* to.
|
|
*/
|
|
value_addr = GREG32_ADDR(I2CS, READ_BUFFER0) + (last_read_pointer >> 2);
|
|
|
|
/* Read-modify-write the register adding the new byte there. */
|
|
word_out_value = *value_addr;
|
|
shift = (last_read_pointer & 3) * 8;
|
|
word_out_value = (word_out_value & ~(0xff << shift)) |
|
|
(((uint32_t)byte_to_read) << shift);
|
|
*value_addr = word_out_value;
|
|
last_read_pointer = (last_read_pointer + 1) & REGISTER_FILE_MASK;
|
|
}
|
|
|
|
void i2cs_post_read_fill_fifo(uint8_t *buffer, size_t len)
|
|
{
|
|
volatile uint32_t *value_addr;
|
|
uint32_t word_out_value;
|
|
uint32_t addr_offset;
|
|
uint32_t remainder_bytes;
|
|
uint32_t start_offset;
|
|
uint32_t num_words;
|
|
int i, j;
|
|
|
|
/* Get offset into 1st fifo word*/
|
|
start_offset = last_read_pointer & 0x3;
|
|
/* Number of bytes to fill out 1st word */
|
|
remainder_bytes = (4 - start_offset) & 0x3;
|
|
/* Get pointer to base of fifo and offset */
|
|
addr_offset = last_read_pointer >> 2;
|
|
value_addr = GREG32_ADDR(I2CS, READ_BUFFER0);
|
|
/* Update read_pointer to reflect final value */
|
|
last_read_pointer = (last_read_pointer + len) &
|
|
REGISTER_FILE_MASK;
|
|
|
|
/* Insert bytes until fifo is word aligned */
|
|
if (remainder_bytes) {
|
|
/* mask the bytes to be kept */
|
|
word_out_value = value_addr[addr_offset];
|
|
word_out_value &= (1 << (8 * start_offset)) - 1;
|
|
/* Write in remainder bytes */
|
|
for (i = 0; i < remainder_bytes; i++)
|
|
word_out_value |= *buffer++ << (8 * (start_offset + i));
|
|
/* Write to fifo register */
|
|
value_addr[addr_offset] = word_out_value;
|
|
addr_offset = (addr_offset + 1) & (REGISTER_FILE_MASK >> 2);
|
|
/* Account for bytes consumed */
|
|
len -= remainder_bytes;
|
|
}
|
|
|
|
/* HW fifo is now word aligned */
|
|
num_words = len >> 2;
|
|
for (i = 0; i < num_words; i++) {
|
|
word_out_value = 0;
|
|
for (j = 0; j < 4; j++)
|
|
word_out_value |= *buffer++ << (j * 8);
|
|
/* Write word to fifo and update fifo offset */
|
|
value_addr[addr_offset] = word_out_value;
|
|
addr_offset = (addr_offset + 1) & (REGISTER_FILE_MASK >> 2);
|
|
}
|
|
len -= (num_words << 2);
|
|
|
|
/* Now process remaining bytes (if any), will be <= 3 at this point */
|
|
remainder_bytes = len;
|
|
if (remainder_bytes) {
|
|
/* read from HW fifo */
|
|
word_out_value = value_addr[addr_offset];
|
|
/* Mask bytes that need to be kept */
|
|
word_out_value &= (0xffffffff << (8 * remainder_bytes));
|
|
for (i = 0; i < remainder_bytes; i++)
|
|
word_out_value |= *buffer++ << (8 * i);
|
|
value_addr[addr_offset] = word_out_value;
|
|
}
|
|
}
|
|
|
|
int i2cs_register_write_complete_handler(wr_complete_handler_f wc_handler)
|
|
{
|
|
task_disable_irq(GC_IRQNUM_I2CS0_INTR_WRITE_COMPLETE_INT);
|
|
|
|
if (!wc_handler)
|
|
return 0;
|
|
|
|
i2cs_init();
|
|
write_complete_handler_ = wc_handler;
|
|
task_enable_irq(GC_IRQNUM_I2CS0_INTR_WRITE_COMPLETE_INT);
|
|
|
|
/*
|
|
* Start a self perpetuating polling function to check for 'hosed'
|
|
* condition periodically.
|
|
*/
|
|
hook_call_deferred(&poll_read_state_data, READ_STATUS_CHECK_INTERVAL);
|
|
|
|
return 0;
|
|
}
|
|
|
|
size_t i2cs_zero_read_fifo_buffer_depth(void)
|
|
{
|
|
uint32_t hw_read_pointer;
|
|
size_t depth;
|
|
|
|
/*
|
|
* Get the current value of the HW I2CS read pointer. Note that the read
|
|
* pointer is b8:b3 of the I2CS_READ_PTR register. The lower 3 bits of
|
|
* this register are used to support bit accesses by a host.
|
|
*/
|
|
hw_read_pointer = GREAD(I2CS, READ_PTR) >> 3;
|
|
/* Determine the number of bytes buffered in the HW fifo */
|
|
depth = (last_read_pointer - hw_read_pointer) & REGISTER_FILE_MASK;
|
|
/*
|
|
* If queue depth is not zero, force it to 0 by adjusting
|
|
* last_read_pointer to where the hw read pointer is.
|
|
*/
|
|
if (depth)
|
|
last_read_pointer = (uint16_t)hw_read_pointer;
|
|
/*
|
|
* Return number of bytes queued when this funciton is called so it can
|
|
* be tracked or logged by caller if desired.
|
|
*/
|
|
return depth;
|
|
}
|
|
|
|
void i2cs_get_status(struct i2cs_status *status)
|
|
{
|
|
status->read_recovery_count = i2cs_read_recovery_count;
|
|
}
|