blob: 8c7df5ba088f5e05fee54e507602463b15cddbf7 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * Flash memory interface rev.5 driver for the Intel
3 * Flash chips used on the NetWinder.
4 *
5 * 20/08/2000 RMK use __ioremap to map flash into virtual memory
6 * make a few more places use "volatile"
7 * 22/05/2001 RMK - Lock read against write
8 * - merge printk level changes (with mods) from Alan Cox.
9 * - use *ppos as the file position, not file->f_pos.
10 * - fix check for out of range pos and r/w size
11 *
12 * Please note that we are tampering with the only flash chip in the
13 * machine, which contains the bootup code. We therefore have the
14 * power to convert these machines into doorstops...
15 */
16
17#include <linux/module.h>
18#include <linux/types.h>
19#include <linux/fs.h>
20#include <linux/errno.h>
21#include <linux/mm.h>
22#include <linux/delay.h>
23#include <linux/proc_fs.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070024#include <linux/miscdevice.h>
25#include <linux/spinlock.h>
26#include <linux/rwsem.h>
27#include <linux/init.h>
28#include <linux/smp_lock.h>
Ingo Molnar6f87f0d2006-03-23 03:00:27 -080029#include <linux/mutex.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070030
31#include <asm/hardware/dec21285.h>
32#include <asm/io.h>
33#include <asm/leds.h>
34#include <asm/mach-types.h>
35#include <asm/system.h>
36#include <asm/uaccess.h>
37
38/*****************************************************************************/
39#include <asm/nwflash.h>
40
41#define NWFLASH_VERSION "6.4"
42
43static void kick_open(void);
44static int get_flash_id(void);
45static int erase_block(int nBlock);
46static int write_block(unsigned long p, const char __user *buf, int count);
47
48#define KFLASH_SIZE 1024*1024 //1 Meg
49#define KFLASH_SIZE4 4*1024*1024 //4 Meg
50#define KFLASH_ID 0x89A6 //Intel flash
51#define KFLASH_ID4 0xB0D4 //Intel flash 4Meg
52
53static int flashdebug; //if set - we will display progress msgs
54
55static int gbWriteEnable;
56static int gbWriteBase64Enable;
57static volatile unsigned char *FLASH_BASE;
58static int gbFlashSize = KFLASH_SIZE;
Ingo Molnar6f87f0d2006-03-23 03:00:27 -080059static DEFINE_MUTEX(nwflash_mutex);
Linus Torvalds1da177e2005-04-16 15:20:36 -070060
Linus Torvalds1da177e2005-04-16 15:20:36 -070061static int get_flash_id(void)
62{
63 volatile unsigned int c1, c2;
64
65 /*
66 * try to get flash chip ID
67 */
68 kick_open();
69 c2 = inb(0x80);
70 *(volatile unsigned char *) (FLASH_BASE + 0x8000) = 0x90;
71 udelay(15);
72 c1 = *(volatile unsigned char *) FLASH_BASE;
73 c2 = inb(0x80);
74
75 /*
76 * on 4 Meg flash the second byte is actually at offset 2...
77 */
78 if (c1 == 0xB0)
79 c2 = *(volatile unsigned char *) (FLASH_BASE + 2);
80 else
81 c2 = *(volatile unsigned char *) (FLASH_BASE + 1);
82
83 c2 += (c1 << 8);
84
85 /*
86 * set it back to read mode
87 */
88 *(volatile unsigned char *) (FLASH_BASE + 0x8000) = 0xFF;
89
90 if (c2 == KFLASH_ID4)
91 gbFlashSize = KFLASH_SIZE4;
92
93 return c2;
94}
95
96static int flash_ioctl(struct inode *inodep, struct file *filep, unsigned int cmd, unsigned long arg)
97{
98 switch (cmd) {
99 case CMD_WRITE_DISABLE:
100 gbWriteBase64Enable = 0;
101 gbWriteEnable = 0;
102 break;
103
104 case CMD_WRITE_ENABLE:
105 gbWriteEnable = 1;
106 break;
107
108 case CMD_WRITE_BASE64K_ENABLE:
109 gbWriteBase64Enable = 1;
110 break;
111
112 default:
113 gbWriteBase64Enable = 0;
114 gbWriteEnable = 0;
115 return -EINVAL;
116 }
117 return 0;
118}
119
120static ssize_t flash_read(struct file *file, char __user *buf, size_t size,
121 loff_t *ppos)
122{
Akinobu Mita6ee89282008-07-25 01:48:18 -0700123 ssize_t ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700124
125 if (flashdebug)
Russell King4ef584b2008-07-26 15:46:39 +0100126 printk(KERN_DEBUG "flash_read: flash_read: offset=0x%llx, "
127 "buffer=%p, count=0x%zx.\n", *ppos, buf, size);
Akinobu Mita6ee89282008-07-25 01:48:18 -0700128 /*
129 * We now lock against reads and writes. --rmk
130 */
131 if (mutex_lock_interruptible(&nwflash_mutex))
132 return -ERESTARTSYS;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700133
Russell King4ef584b2008-07-26 15:46:39 +0100134 ret = simple_read_from_buffer(buf, size, ppos, (void *)FLASH_BASE, gbFlashSize);
Akinobu Mita6ee89282008-07-25 01:48:18 -0700135 mutex_unlock(&nwflash_mutex);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700136
Linus Torvalds1da177e2005-04-16 15:20:36 -0700137 return ret;
138}
139
140static ssize_t flash_write(struct file *file, const char __user *buf,
141 size_t size, loff_t * ppos)
142{
143 unsigned long p = *ppos;
144 unsigned int count = size;
145 int written;
146 int nBlock, temp, rc;
147 int i, j;
148
149 if (flashdebug)
150 printk("flash_write: offset=0x%lX, buffer=0x%p, count=0x%X.\n",
151 p, buf, count);
152
153 if (!gbWriteEnable)
154 return -EINVAL;
155
156 if (p < 64 * 1024 && (!gbWriteBase64Enable))
157 return -EINVAL;
158
159 /*
160 * check for out of range pos or count
161 */
162 if (p >= gbFlashSize)
163 return count ? -ENXIO : 0;
164
165 if (count > gbFlashSize - p)
166 count = gbFlashSize - p;
167
168 if (!access_ok(VERIFY_READ, buf, count))
169 return -EFAULT;
170
171 /*
172 * We now lock against reads and writes. --rmk
173 */
Ingo Molnar6f87f0d2006-03-23 03:00:27 -0800174 if (mutex_lock_interruptible(&nwflash_mutex))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700175 return -ERESTARTSYS;
176
177 written = 0;
178
179 leds_event(led_claim);
180 leds_event(led_green_on);
181
182 nBlock = (int) p >> 16; //block # of 64K bytes
183
184 /*
185 * # of 64K blocks to erase and write
186 */
187 temp = ((int) (p + count) >> 16) - nBlock + 1;
188
189 /*
190 * write ends at exactly 64k boundary?
191 */
192 if (((int) (p + count) & 0xFFFF) == 0)
193 temp -= 1;
194
195 if (flashdebug)
196 printk(KERN_DEBUG "flash_write: writing %d block(s) "
197 "starting at %d.\n", temp, nBlock);
198
199 for (; temp; temp--, nBlock++) {
200 if (flashdebug)
201 printk(KERN_DEBUG "flash_write: erasing block %d.\n", nBlock);
202
203 /*
204 * first we have to erase the block(s), where we will write...
205 */
206 i = 0;
207 j = 0;
208 RetryBlock:
209 do {
210 rc = erase_block(nBlock);
211 i++;
212 } while (rc && i < 10);
213
214 if (rc) {
215 printk(KERN_ERR "flash_write: erase error %x\n", rc);
216 break;
217 }
218 if (flashdebug)
219 printk(KERN_DEBUG "flash_write: writing offset %lX, "
220 "from buf %p, bytes left %X.\n", p, buf,
221 count - written);
222
223 /*
224 * write_block will limit write to space left in this block
225 */
226 rc = write_block(p, buf, count - written);
227 j++;
228
229 /*
230 * if somehow write verify failed? Can't happen??
231 */
232 if (!rc) {
233 /*
234 * retry up to 10 times
235 */
236 if (j < 10)
237 goto RetryBlock;
238 else
239 /*
240 * else quit with error...
241 */
242 rc = -1;
243
244 }
245 if (rc < 0) {
246 printk(KERN_ERR "flash_write: write error %X\n", rc);
247 break;
248 }
249 p += rc;
250 buf += rc;
251 written += rc;
252 *ppos += rc;
253
254 if (flashdebug)
255 printk(KERN_DEBUG "flash_write: written 0x%X bytes OK.\n", written);
256 }
257
258 /*
259 * restore reg on exit
260 */
261 leds_event(led_release);
262
Ingo Molnar6f87f0d2006-03-23 03:00:27 -0800263 mutex_unlock(&nwflash_mutex);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700264
265 return written;
266}
267
268
269/*
270 * The memory devices use the full 32/64 bits of the offset, and so we cannot
271 * check against negative addresses: they are ok. The return value is weird,
272 * though, in that case (0).
273 *
274 * also note that seeking relative to the "end of file" isn't supported:
275 * it has no meaning, so it returns -EINVAL.
276 */
277static loff_t flash_llseek(struct file *file, loff_t offset, int orig)
278{
279 loff_t ret;
280
281 lock_kernel();
282 if (flashdebug)
283 printk(KERN_DEBUG "flash_llseek: offset=0x%X, orig=0x%X.\n",
284 (unsigned int) offset, orig);
285
286 switch (orig) {
287 case 0:
288 if (offset < 0) {
289 ret = -EINVAL;
290 break;
291 }
292
293 if ((unsigned int) offset > gbFlashSize) {
294 ret = -EINVAL;
295 break;
296 }
297
298 file->f_pos = (unsigned int) offset;
299 ret = file->f_pos;
300 break;
301 case 1:
302 if ((file->f_pos + offset) > gbFlashSize) {
303 ret = -EINVAL;
304 break;
305 }
306 if ((file->f_pos + offset) < 0) {
307 ret = -EINVAL;
308 break;
309 }
310 file->f_pos += offset;
311 ret = file->f_pos;
312 break;
313 default:
314 ret = -EINVAL;
315 }
316 unlock_kernel();
317 return ret;
318}
319
320
321/*
322 * assume that main Write routine did the parameter checking...
323 * so just go ahead and erase, what requested!
324 */
325
326static int erase_block(int nBlock)
327{
328 volatile unsigned int c1;
329 volatile unsigned char *pWritePtr;
330 unsigned long timeout;
331 int temp, temp1;
332
333 /*
334 * orange LED == erase
335 */
336 leds_event(led_amber_on);
337
338 /*
339 * reset footbridge to the correct offset 0 (...0..3)
340 */
341 *CSR_ROMWRITEREG = 0;
342
343 /*
344 * dummy ROM read
345 */
346 c1 = *(volatile unsigned char *) (FLASH_BASE + 0x8000);
347
348 kick_open();
349 /*
350 * reset status if old errors
351 */
352 *(volatile unsigned char *) (FLASH_BASE + 0x8000) = 0x50;
353
354 /*
355 * erase a block...
356 * aim at the middle of a current block...
357 */
358 pWritePtr = (unsigned char *) ((unsigned int) (FLASH_BASE + 0x8000 + (nBlock << 16)));
359 /*
360 * dummy read
361 */
362 c1 = *pWritePtr;
363
364 kick_open();
365 /*
366 * erase
367 */
368 *(volatile unsigned char *) pWritePtr = 0x20;
369
370 /*
371 * confirm
372 */
373 *(volatile unsigned char *) pWritePtr = 0xD0;
374
375 /*
376 * wait 10 ms
377 */
378 msleep(10);
379
380 /*
381 * wait while erasing in process (up to 10 sec)
382 */
383 timeout = jiffies + 10 * HZ;
384 c1 = 0;
385 while (!(c1 & 0x80) && time_before(jiffies, timeout)) {
386 msleep(10);
387 /*
388 * read any address
389 */
390 c1 = *(volatile unsigned char *) (pWritePtr);
391 // printk("Flash_erase: status=%X.\n",c1);
392 }
393
394 /*
395 * set flash for normal read access
396 */
397 kick_open();
398// *(volatile unsigned char*)(FLASH_BASE+0x8000) = 0xFF;
399 *(volatile unsigned char *) pWritePtr = 0xFF; //back to normal operation
400
401 /*
402 * check if erase errors were reported
403 */
404 if (c1 & 0x20) {
405 printk(KERN_ERR "flash_erase: err at %p\n", pWritePtr);
406
407 /*
408 * reset error
409 */
410 *(volatile unsigned char *) (FLASH_BASE + 0x8000) = 0x50;
411 return -2;
412 }
413
414 /*
415 * just to make sure - verify if erased OK...
416 */
417 msleep(10);
418
419 pWritePtr = (unsigned char *) ((unsigned int) (FLASH_BASE + (nBlock << 16)));
420
421 for (temp = 0; temp < 16 * 1024; temp++, pWritePtr += 4) {
422 if ((temp1 = *(volatile unsigned int *) pWritePtr) != 0xFFFFFFFF) {
423 printk(KERN_ERR "flash_erase: verify err at %p = %X\n",
424 pWritePtr, temp1);
425 return -1;
426 }
427 }
428
429 return 0;
430
431}
432
433/*
434 * write_block will limit number of bytes written to the space in this block
435 */
436static int write_block(unsigned long p, const char __user *buf, int count)
437{
438 volatile unsigned int c1;
439 volatile unsigned int c2;
440 unsigned char *pWritePtr;
441 unsigned int uAddress;
442 unsigned int offset;
443 unsigned long timeout;
444 unsigned long timeout1;
445
446 /*
447 * red LED == write
448 */
449 leds_event(led_amber_off);
450 leds_event(led_red_on);
451
452 pWritePtr = (unsigned char *) ((unsigned int) (FLASH_BASE + p));
453
454 /*
455 * check if write will end in this block....
456 */
457 offset = p & 0xFFFF;
458
459 if (offset + count > 0x10000)
460 count = 0x10000 - offset;
461
462 /*
463 * wait up to 30 sec for this block
464 */
465 timeout = jiffies + 30 * HZ;
466
467 for (offset = 0; offset < count; offset++, pWritePtr++) {
468 uAddress = (unsigned int) pWritePtr;
469 uAddress &= 0xFFFFFFFC;
470 if (__get_user(c2, buf + offset))
471 return -EFAULT;
472
473 WriteRetry:
474 /*
475 * dummy read
476 */
477 c1 = *(volatile unsigned char *) (FLASH_BASE + 0x8000);
478
479 /*
480 * kick open the write gate
481 */
482 kick_open();
483
484 /*
485 * program footbridge to the correct offset...0..3
486 */
487 *CSR_ROMWRITEREG = (unsigned int) pWritePtr & 3;
488
489 /*
490 * write cmd
491 */
492 *(volatile unsigned char *) (uAddress) = 0x40;
493
494 /*
495 * data to write
496 */
497 *(volatile unsigned char *) (uAddress) = c2;
498
499 /*
500 * get status
501 */
502 *(volatile unsigned char *) (FLASH_BASE + 0x10000) = 0x70;
503
504 c1 = 0;
505
506 /*
507 * wait up to 1 sec for this byte
508 */
509 timeout1 = jiffies + 1 * HZ;
510
511 /*
512 * while not ready...
513 */
514 while (!(c1 & 0x80) && time_before(jiffies, timeout1))
515 c1 = *(volatile unsigned char *) (FLASH_BASE + 0x8000);
516
517 /*
518 * if timeout getting status
519 */
520 if (time_after_eq(jiffies, timeout1)) {
521 kick_open();
522 /*
523 * reset err
524 */
525 *(volatile unsigned char *) (FLASH_BASE + 0x8000) = 0x50;
526
527 goto WriteRetry;
528 }
529 /*
530 * switch on read access, as a default flash operation mode
531 */
532 kick_open();
533 /*
534 * read access
535 */
536 *(volatile unsigned char *) (FLASH_BASE + 0x8000) = 0xFF;
537
538 /*
539 * if hardware reports an error writing, and not timeout -
540 * reset the chip and retry
541 */
542 if (c1 & 0x10) {
543 kick_open();
544 /*
545 * reset err
546 */
547 *(volatile unsigned char *) (FLASH_BASE + 0x8000) = 0x50;
548
549 /*
550 * before timeout?
551 */
552 if (time_before(jiffies, timeout)) {
553 if (flashdebug)
554 printk(KERN_DEBUG "write_block: Retrying write at 0x%X)n",
555 pWritePtr - FLASH_BASE);
556
557 /*
558 * no LED == waiting
559 */
560 leds_event(led_amber_off);
561 /*
562 * wait couple ms
563 */
564 msleep(10);
565 /*
566 * red LED == write
567 */
568 leds_event(led_red_on);
569
570 goto WriteRetry;
571 } else {
572 printk(KERN_ERR "write_block: timeout at 0x%X\n",
573 pWritePtr - FLASH_BASE);
574 /*
575 * return error -2
576 */
577 return -2;
578
579 }
580 }
581 }
582
583 /*
584 * green LED == read/verify
585 */
586 leds_event(led_amber_off);
587 leds_event(led_green_on);
588
589 msleep(10);
590
591 pWritePtr = (unsigned char *) ((unsigned int) (FLASH_BASE + p));
592
593 for (offset = 0; offset < count; offset++) {
594 char c, c1;
595 if (__get_user(c, buf))
596 return -EFAULT;
597 buf++;
598 if ((c1 = *pWritePtr++) != c) {
599 printk(KERN_ERR "write_block: verify error at 0x%X (%02X!=%02X)\n",
600 pWritePtr - FLASH_BASE, c1, c);
601 return 0;
602 }
603 }
604
605 return count;
606}
607
608
609static void kick_open(void)
610{
611 unsigned long flags;
612
613 /*
614 * we want to write a bit pattern XXX1 to Xilinx to enable
615 * the write gate, which will be open for about the next 2ms.
616 */
Russell King70d13e02008-12-06 08:25:16 +0000617 spin_lock_irqsave(&nw_gpio_lock, flags);
618 nw_cpld_modify(CPLD_FLASH_WR_ENABLE, CPLD_FLASH_WR_ENABLE);
619 spin_unlock_irqrestore(&nw_gpio_lock, flags);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700620
621 /*
622 * let the ISA bus to catch on...
623 */
624 udelay(25);
625}
626
Arjan van de Ven62322d22006-07-03 00:24:21 -0700627static const struct file_operations flash_fops =
Linus Torvalds1da177e2005-04-16 15:20:36 -0700628{
629 .owner = THIS_MODULE,
630 .llseek = flash_llseek,
631 .read = flash_read,
632 .write = flash_write,
633 .ioctl = flash_ioctl,
634};
635
636static struct miscdevice flash_miscdev =
637{
638 FLASH_MINOR,
639 "nwflash",
640 &flash_fops
641};
642
643static int __init nwflash_init(void)
644{
645 int ret = -ENODEV;
646
647 if (machine_is_netwinder()) {
648 int id;
649
650 FLASH_BASE = ioremap(DC21285_FLASH, KFLASH_SIZE4);
651 if (!FLASH_BASE)
652 goto out;
653
654 id = get_flash_id();
655 if ((id != KFLASH_ID) && (id != KFLASH_ID4)) {
656 ret = -ENXIO;
657 iounmap((void *)FLASH_BASE);
658 printk("Flash: incorrect ID 0x%04X.\n", id);
659 goto out;
660 }
661
662 printk("Flash ROM driver v.%s, flash device ID 0x%04X, size %d Mb.\n",
663 NWFLASH_VERSION, id, gbFlashSize / (1024 * 1024));
664
665 ret = misc_register(&flash_miscdev);
666 if (ret < 0) {
667 iounmap((void *)FLASH_BASE);
668 }
669 }
670out:
671 return ret;
672}
673
674static void __exit nwflash_exit(void)
675{
676 misc_deregister(&flash_miscdev);
677 iounmap((void *)FLASH_BASE);
678}
679
680MODULE_LICENSE("GPL");
681
682module_param(flashdebug, bool, 0644);
683
684module_init(nwflash_init);
685module_exit(nwflash_exit);